Commit Graph

  • 9449a87a1f Strip Out http and https in domains, vendors and passwords johnnyq 2023-05-22 10:39:50 -04:00
  • 96d39a328f Remove old multi-company code causing breakage. Closes #689 thanks @Heart1010 johnnyq 2023-05-22 10:30:36 -04:00
  • 80fa93626a Merge pull request #688 from wrongecho/client-website-remove-protocol-regex Johnny 2023-05-21 22:43:26 -04:00
  • 20a65089b6 Update invoice_payment_add_modal.php wrongecho 2023-05-20 20:34:20 +01:00
  • e8b5c881fe Update invoice.php wrongecho 2023-05-20 20:31:12 +01:00
  • 7d3f4fefbf Update functions.php wrongecho 2023-05-20 20:27:37 +01:00
  • 6c84b8edca Update expense_add_modal.php wrongecho 2023-05-20 20:22:20 +01:00
  • a8f3b0fed1 Update custom_field_edit_modal.php wrongecho 2023-05-20 20:21:23 +01:00
  • 9fd57cef43 Update cron_ticket_email_parser.php wrongecho 2023-05-20 20:20:05 +01:00
  • e650b7938e Update client_software_add_modal.php wrongecho 2023-05-20 20:18:15 +01:00
  • 6673f27cec Update client_software_add_from_template_modal.php wrongecho 2023-05-20 20:16:30 +01:00
  • 54911769c6 Update ajax.php wrongecho 2023-05-20 19:50:48 +01:00
  • 337bd27ee8 Update contact.php wrongecho 2023-05-20 19:49:25 +01:00
  • eb2c42f4a3 Update cron_ticket_email_parser.php wrongecho 2023-05-20 19:47:33 +01:00
  • d0fa30d476 Add regex to remove http:// or https:// from client_website #684 Marcus Hill 2023-05-20 18:49:21 +01:00
  • 0abc6b384c Merge pull request #686 from bhopkins0/patch-2 Johnny 2023-05-20 11:30:49 -04:00
  • c63b965807 Merge pull request #687 from wrongecho/fix-leftover-vulnerable-code wrongecho 2023-05-20 15:36:03 +01:00
  • cea954008f Remove SQL-injection vulnerable code in this file that was previously fixed in inc_all_client.php Marcus Hill 2023-05-20 15:33:46 +01:00
  • 23f7866c8f Increased security for getIP() function Brent Hopkins 2023-05-18 05:41:06 -05:00
  • c403380562 Sort Recurring Next Date ASC instead of DESC, add missing select2 class to select inputs johnnyq 2023-05-17 12:04:12 -04:00
  • 11eb104383 Fix carriage return and new lines in reply emails see https://forum.itflow.org/d/169-carriage-return-and-line-feeds-showing-in-ticket-email johnnyq 2023-05-16 11:07:24 -04:00
  • a60a9456f0 Merge pull request #685 from wrongecho/rev-679 wrongecho 2023-05-15 21:44:53 +01:00
  • 0144132649 Ticket.php: revert PR 679 Marcus Hill 2023-05-15 21:40:59 +01:00
  • 77fb0e008f Stack Contact infosuch as phone, mobile and email for contacts on one column as these don't need tp be sortable and will make room for more detail columns to be sortable johnnyq 2023-05-15 14:24:11 -04:00
  • 1f580fc638 Updated README to exclude SummerNote and include TinyMCE johnnyq 2023-05-15 13:33:40 -04:00
  • 0b1b551df5 Remove SummerNote Code we have replaced this with TinyMCE johnnyq 2023-05-15 13:32:21 -04:00
  • 0649931797 Merge pull request #683 from wrongecho/ticket-button-wording Johnny 2023-05-15 13:29:15 -04:00
  • 02ced0dbbd Fix codesmell Marcus Hill 2023-05-14 20:19:07 +01:00
  • 1057481039 Ticket.php Marcus Hill 2023-05-14 20:16:04 +01:00
  • eb4c5cbf34 Merge pull request #682 from wrongecho/master wrongecho 2023-05-14 19:50:14 +01:00
  • 40a8c6d723 Tidy Marcus Hill 2023-05-14 19:48:29 +01:00
  • 994d2fa5e4 Update README.md wrongecho 2023-05-14 07:57:22 +01:00
  • 8861243792 Merge pull request #679 from aftechro/patch-11 Johnny 2023-05-14 00:25:21 -04:00
  • ee913da18f Merge pull request #680 from wrongecho/login-get-param Johnny 2023-05-14 00:24:16 -04:00
  • 9e91066a09 Merge pull request #681 from wrongecho/cron-email-invoice Johnny 2023-05-14 00:23:52 -04:00
  • 4183583ef5 Update ticket.php AFTECH.RO 2023-05-13 23:30:33 +01:00
  • c2b6591cda Cron - Send invoices to all billing contacts + primary Marcus Hill 2023-05-13 23:10:36 +01:00
  • d2d1b25e32 Update guest_pay_invoice_stripe.php wrongecho 2023-05-13 22:44:39 +01:00
  • 5d6d7e389e Add database structure for 'login key' protection concept Marcus Hill 2023-05-13 21:49:09 +01:00
  • ffe4061429 Update ticket.php AFTECH.RO 2023-05-13 09:42:48 +01:00
  • 052d418bad Update ticket.php AFTECH.RO 2023-05-13 02:30:34 +01:00
  • a79baae2a8 Merge pull request #677 from wrongecho/domain-expire-quotes Johnny 2023-05-12 18:51:34 -04:00
  • b281a19e6b Fix domain registrar/webhost update not working Marcus Hill 2023-05-12 23:26:39 +01:00
  • e67a75805c Fix: Authenticated users can craft a POST request to delete any file on the webserver. Thank you @ bhopkins0 johnnyq 2023-05-12 15:24:57 -04:00
  • 51ee479130 oops fix replaced the actualy function with nullable johnnyq 2023-05-11 18:34:06 -04:00
  • 37fb696e63 Replace the remaining php files with nullable_htmlentites() johnnyq 2023-05-11 18:27:48 -04:00
  • ccf0d3ab77 Replace all instances of htmlentities() with the new function nullable_htmlentities() thanks @bhopkins0 johnnyq 2023-05-11 18:23:36 -04:00
  • f136a915b4 Merge pull request #676 from bhopkins0/patch-1 Johnny 2023-05-11 18:05:12 -04:00
  • b1dfbada0c Merge pull request #675 from bhopkins0/master Johnny 2023-05-11 18:02:24 -04:00
  • 019050ba82 Add function to use htmlentities without deprecated error Brent Hopkins 2023-05-11 16:37:21 -05:00
  • cdd2a31217 Update MySQL query Brent Hopkins 2023-05-11 16:07:05 -05:00
  • 9de9dcd1b3 Add client_tags.client_tag_tag_id to GROUP BY Brent Hopkins 2023-05-11 02:43:58 -05:00
  • 1e9c822033 Merge pull request #674 from bhopkins0/master Johnny 2023-05-11 01:27:35 -04:00
  • d1fc5c3c99 Change button look Brent Hopkins 2023-05-10 21:35:48 -05:00
  • 8b89ba31db Fix Raise ticket under client portal another regression when we moved to TinyMCE. Expanded Document view to container width johnnyq 2023-05-10 11:50:55 -04:00
  • cf0205ba21 Tidy Portal Header johnnyq 2023-05-09 16:37:32 -04:00
  • 901b51a18e Merge branch 'master' of github.com:itflow-org/itflow johnnyq 2023-05-09 15:51:15 -04:00
  • 485510a3ce Fix Create Ticket not submitting due to TinyMCE not respecting required fields in the textarea form inputs, removed the required fields for now johnnyq 2023-05-09 15:50:26 -04:00
  • 0665ec5701 Update bug_report.md wrongecho 2023-05-09 20:30:07 +01:00
  • ad5743f176 Update support.md wrongecho 2023-05-09 20:28:29 +01:00
  • 6f6ae476a9 Added comment in pagination_head.php regarding issue #673 johnnyq 2023-05-09 15:22:02 -04:00
  • 8d666abc40 Tidy johnnyq 2023-05-09 15:13:44 -04:00
  • 163f14e791 Fixed Escaping issue with sortby unfortuantly with order_by mysql_escape is not enough and must also be filtered with a preg_replace Thanks @tdragon6 johnnyq 2023-05-09 15:12:39 -04:00
  • cb0366b9f7 Fix XSS in expenses and trips export CSV modal Thanks @tdragon johnnyq 2023-05-09 12:11:42 -04:00
  • 09ff8b710b Enable browser spell checker for TinyMCE johnnyq 2023-05-09 00:31:09 -04:00
  • 043a9cfa0a Fixed Ticket Reply currently an issue where required fields using TinyMCE wont POST looking into it johnnyq 2023-05-08 22:15:23 -04:00
  • eb3decb4da Enabled TinyMCE for mobile users as well johnnyq 2023-05-08 21:25:06 -04:00
  • c3a711d75d More TinyMCE in more places johnnyq 2023-05-08 19:53:42 -04:00
  • 01a37cb1e1 Replace Summernote WYSIWYG with TinyMCE johnnyq 2023-05-08 18:44:00 -04:00
  • 018f52eb67 Revert for now added HTML Purify to client tickets as well johnnyq 2023-05-08 14:38:42 -04:00
  • eb9a8000b1 Fix Rendering issues with tickets editing because ticket client_tickets and ticket all share the same edit modal which already uses htmlentites to prevent xss but so it doesnt conflict with htmlpurify in ticket details we decided to split the vars to ticket_details and ticket_details_edit which is unfilter initially but gets filtered in the modals johnnyq 2023-05-08 13:52:43 -04:00
  • 9887fc4a19 Removed HTML Purify on tickets.php and use htmlentities instead to mimic client_tickets.php was causing some rendering issues when you goto edit a ticket under client tickets tested for XSS all tests came back clean johnnyq 2023-05-08 13:24:43 -04:00
  • 5ee78ef1f3 When deleting quote from the client or global list view redirect quote delete back to the correct corresponsing list view also make Delete Quote Functional on quote details johnnyq 2023-05-08 12:37:05 -04:00
  • 53e0ebdbf6 Merge pull request #672 from wrongecho/portal-modules Johnny 2023-05-08 11:35:34 -04:00
  • 226d3ffeb2 Merge pull request #671 from wrongecho/ticket-auto-close-2 Johnny 2023-05-08 11:35:14 -04:00
  • db6b88edd3 Codesmell Marcus Hill 2023-05-08 10:54:40 +01:00
  • 0e062081cb Client Portal Marcus Hill 2023-05-08 10:50:53 +01:00
  • 3a83a701b5 Ticket autoclose: Clarify auto-close help wording; only show as ticket status option if enabled Marcus Hill 2023-05-08 09:43:46 +01:00
  • 03e0dd8f5e Initial DB Structure for Projects and Tasks with Ticket and Client Linkage johnnyq 2023-05-07 21:43:20 -04:00
  • 93d4f3ebce You can now set the number of hours before a ticket is automatically closed if autoclose is set johnnyq 2023-05-07 21:09:18 -04:00
  • 37b375c1d9 Remove cruft johnnyq 2023-05-07 20:47:15 -04:00
  • 78695208b7 Fix custom Fields DB Structure Remove Unique Indexes change defaut type TEXT to text Added Add edit Delete Read for custom fields johnnyq 2023-05-07 20:46:09 -04:00
  • 0f758c5901 Finished DB Structure for the coming new feature custom fields johnnyq 2023-05-07 19:45:55 -04:00
  • ac51f0cb72 Add Quick link to docs.itflow.org on the top bar johnnyq 2023-05-02 14:58:35 -04:00
  • 072c2f9e14 Fix cron stating cron key is always invalid johnnyq 2023-05-02 13:45:23 -04:00
  • a0da341114 Updated initial db structure for installation johnnyq 2023-05-02 12:36:18 -04:00
  • 3f2f663b7b Check to see if args is set johnnyq 2023-05-01 16:56:29 -04:00
  • f7ee489293 BREAKING CRON CHANGES: must generate a cron key before using cron. Cron will need updated like so php /full/path/to/cron.php [KEY] and same with cron_ticket_parse.php johnnyq 2023-05-01 16:51:20 -04:00
  • 8110b0ffa7 Merge pull request #668 from wrongecho/portal-rem-company Johnny 2023-05-01 11:52:33 -04:00
  • 07ac69a528 Merge pull request #667 from wrongecho/ticket-auto-close Johnny 2023-05-01 11:52:20 -04:00
  • fc1eb4cd69 Merge pull request #666 from wrongecho/email-invoice Johnny 2023-05-01 11:51:13 -04:00
  • bf45c58ed1 Remove reference to non-existent company_id field in contacts table Marcus Hill 2023-05-01 14:01:23 +01:00
  • dc2293c8dd Add auto close ticket feature Marcus Hill 2023-05-01 02:02:45 +01:00
  • 588206d79d When sending invoices manually, send to all billing contacts instead of just primary contact Marcus Hill 2023-05-01 00:06:11 +01:00
  • 8cf1bd8911 Set Working directory of cron parser upon initializtion which fixes relative path issue when adding attachments to tickets johnnyq 2023-04-30 13:28:00 -04:00
  • c11b3d5987 Merge pull request #665 from wrongecho/email-ticket-attachments Johnny 2023-04-30 12:43:42 -04:00
  • 0a9af8f2e0 Ticket attachments (email) Marcus Hill 2023-04-30 10:52:25 +01:00
  • a3d8f5ab48 Ticket attachments (email) Marcus Hill 2023-04-30 10:52:15 +01:00
  • ab1582fe3a Merge pull request #664 from wrongecho/csp-initial-test Johnny 2023-04-30 00:35:08 -04:00
  • 0340b080ad CSP - Client Portal Test Marcus Hill 2023-04-29 19:39:42 +01:00