Commit Graph

  • d86285aafd SQL Escape domain/cert/client/ticket fields to prevent them potentially breaking SQL queries Marcus Hill 2023-01-02 15:03:56 +00:00
  • f150b3cb27 Tidy comment Marcus Hill 2023-01-02 14:57:46 +00:00
  • b1bb854328 Escape potential HTML in ticket prefix Marcus Hill 2023-01-02 14:56:04 +00:00
  • 72fd102e57 SQL Escape tech username. The username is added to most log entries meaning that a simple apostrophe in the name breaks all logging for the user Marcus Hill 2023-01-02 14:54:49 +00:00
  • 5460825ece Replace stripslashes with strip_tags Marcus Hill 2023-01-02 14:44:46 +00:00
  • dcf0bb67d1 Escape potential HTML characters in client name Marcus Hill 2023-01-02 14:41:14 +00:00
  • 447f20c91c Escape potential HTML characters in the API Key name, as this is used in logs Marcus Hill 2023-01-02 14:38:52 +00:00
  • 1aa87ccaeb API Key error wording Marcus Hill 2023-01-02 14:37:56 +00:00
  • cf8713fc73 Fix software read API query via key Marcus Hill 2023-01-02 14:34:59 +00:00
  • 5a35f508c6 Remove unrequired trim & strip tags - only needs sql escape Marcus Hill 2023-01-02 14:32:17 +00:00
  • 8687f56eb0 Remove unrequired trim & strip tags - only needs sql escape Marcus Hill 2023-01-02 14:31:29 +00:00
  • 2454961389 Escape special characters in a shared doc/file/login name to prevent potentially breaking the ajax sharing log query Marcus Hill 2023-01-02 14:14:30 +00:00
  • b37778b7a1 Escape potential HTML and limit output from SQL query to required fields when calling merge ticket details ajax query Marcus Hill 2023-01-02 14:00:37 +00:00
  • 79dc34da92 Escape potential HTML characters in usernames (ticket collision detection) Marcus Hill 2023-01-02 13:48:16 +00:00
  • 3bf4d7a1f1 Remove test file Marcus Hill 2023-01-02 13:03:41 +00:00
  • f5a2b1df68 Rename & disable unused stripe test page Marcus Hill 2023-01-02 12:56:51 +00:00
  • 17850f3510 Remove test/old client print and client header pages Marcus Hill 2023-01-02 12:50:42 +00:00
  • 8ea674d35e Remove unused assets.php file Marcus Hill 2023-01-02 12:45:13 +00:00
  • 3fd62cd16e Merge pull request #545 from wrongecho/tidy Johnny 2023-01-01 15:56:34 -05:00
  • 94d8ec5360 Merge pull request #544 from wrongecho/cert-expiring-circle Johnny 2023-01-01 15:56:14 -05:00
  • 070d9ac1f5 Merge pull request #543 from wrongecho/dashboards Johnny 2023-01-01 15:55:39 -05:00
  • c7381195ac Merge pull request #542 from wrongecho/contact-important-db-fix Johnny 2023-01-01 15:55:23 -05:00
  • dd00f48e5b Portal code style tidy Marcus Hill 2023-01-01 16:05:48 +00:00
  • ff741c223e API code style tidy Marcus Hill 2023-01-01 16:00:07 +00:00
  • 6746edda1a Misc tidying code spacing & formatting in accordance with SonarCloud/PSR Marcus Hill 2023-01-01 15:41:21 +00:00
  • 60ece6ee00 Tidy sidenav too Marcus Hill 2023-01-01 14:42:40 +00:00
  • 86327b3595 Tidy Marcus Hill 2023-01-01 14:40:06 +00:00
  • a07dfb45e0 Tidy Marcus Hill 2023-01-01 14:33:13 +00:00
  • 4d1b13d85e Small tidy Marcus Hill 2023-01-01 14:15:31 +00:00
  • 93773a6ca3 Add yellow circle to certificate nav menu if expiring Marcus Hill 2023-01-01 14:12:44 +00:00
  • 66d692d0f6 Add domain and cert expiring numbers to tech dashboard Marcus Hill 2023-01-01 14:02:00 +00:00
  • d255f05192 Remove unused monthly recurring query Marcus Hill 2023-01-01 13:45:47 +00:00
  • fa24516ad5 Redirect techs to technical dashboard instead of clients.php page Marcus Hill 2023-01-01 13:42:08 +00:00
  • 07986954f5 Redirect/show techs to technical dashboard on login/navbar Marcus Hill 2023-01-01 13:41:29 +00:00
  • 4ec88257d7 Add basic outline for technical dashboard Marcus Hill 2023-01-01 13:40:54 +00:00
  • 40789eff32 Deduplicate sql payment years query Marcus Hill 2023-01-01 13:40:18 +00:00
  • d2bbf3436a Adjust contact_important field to after contact_password_reset_token instead Marcus Hill 2023-01-01 11:26:58 +00:00
  • ab34712bd9 Add contact_important DB field to database updater Marcus Hill 2023-01-01 11:25:12 +00:00
  • 807d374b90 Merge branch 'master' of github.com:itflow-org/itflow johnnyq 2022-12-31 15:54:51 -05:00
  • e943faecf0 Added Important Functionality to Contacts, Cleaned up UI elements in the contacts and users modals. Added partial User and contact Invite functionality. johnnyq 2022-12-31 15:54:34 -05:00
  • 51a7e59c16 Merge pull request #541 from wrongecho/license-export Johnny 2022-12-31 14:38:30 -05:00
  • edf071c677 Merge pull request #540 from wrongecho/portal-user-instructions Johnny 2022-12-31 14:38:04 -05:00
  • 8db42df93e Merge pull request #536 from wrongecho/ticket-emails Johnny 2022-12-31 14:37:50 -05:00
  • 7fd2d0677c Add more fields to software CSV export Marcus Hill 2022-12-31 18:20:31 +00:00
  • a97ce3c59a Add option on the contact edit modal to send client a welcome email Marcus Hill 2022-12-31 17:25:10 +00:00
  • be3ec96ef6 Add functionality to send emails to clients when their tickets are closed. Marcus Hill 2022-12-31 15:36:27 +00:00
  • cb6211526c better keygen for masterkey on setup johnnyq 2022-12-29 18:29:14 -05:00
  • 6dab710b6b Merge branch 'master' of github.com:itflow-org/itflow johnnyq 2022-12-29 18:23:35 -05:00
  • 29a9d6ef8f Generate longer more secure Key for logins johnnyq 2022-12-29 18:23:11 -05:00
  • 14a405ee6d Merge pull request #534 from wrongecho/revert Johnny 2022-12-29 18:22:14 -05:00
  • ba7f4ab83d Merge pull request #533 from wrongecho/deprecate-multi-company Johnny 2022-12-29 18:21:47 -05:00
  • ad26daa465 Show techs the sales menu in accordance with new access matrix Marcus Hill 2022-12-29 22:33:36 +00:00
  • 8906a1960f Revert "Enforce accountant or admin role to peform accounting related post requests" Marcus Hill 2022-12-29 22:30:40 +00:00
  • d842dbb863 Revert "Hide invoice ticket button for techs" Marcus Hill 2022-12-29 22:29:54 +00:00
  • 5d6b03141b Generate longer more secure Key for browser extension johnnyq 2022-12-29 16:59:47 -05:00
  • 13d2429a45 Merge branch 'master' of github.com:itflow-org/itflow johnnyq 2022-12-29 16:51:40 -05:00
  • d6d908f0b8 Generate longer more secure Keys for shareable URLs using best practice johnnyq 2022-12-29 16:50:57 -05:00
  • 93cb97f630 Add deprecated notice to companies module and associated functionality (#532) Marcus Hill 2022-12-29 21:41:53 +00:00
  • ad6afc4d29 Merge pull request #529 from wrongecho/deduplicate Johnny 2022-12-29 11:48:11 -05:00
  • 7874690560 Merge pull request #528 from wrongecho/accountant-role-enforcements Johnny 2022-12-29 11:47:56 -05:00
  • 5edd71facc Deduplicate client overviw SQL queries Marcus Hill 2022-12-28 21:09:56 +00:00
  • 6df24d859e Hide invoice ticket button for techs Marcus Hill 2022-12-28 20:51:24 +00:00
  • ea3a12bdd7 Enforce accountant or admin role to peform accounting related post requests Marcus Hill 2022-12-28 20:46:24 +00:00
  • a255441bc3 Merge pull request #526 from wrongecho/setup-db-auth-helper Johnny 2022-12-26 23:54:27 -05:00
  • 7a76033e55 Tidy try catch Marcus Hill 2022-12-24 18:35:44 +00:00
  • 063085528c Add check of database credentials during setup before they are written to config.php Marcus Hill 2022-12-24 18:30:14 +00:00
  • 9587827792 Added missing select2 class to ticket status dropdown johnnyq 2022-12-21 21:38:24 -05:00
  • 2a16b6d2ae Remove some tags there and here some more output formatting all thanks to the great security researcher @indevi0us for pointing these out to us. johnnyq 2022-12-21 21:31:51 -05:00
  • 9036fe6853 Added Admin validation check on Edit user post thank you for reporting this to us @indevi0us johnnyq 2022-12-20 16:13:07 -05:00
  • bad026f469 Added new db.sql structure dump for new installs for the the new SQL fields. johnnyq 2022-12-19 11:43:47 -05:00
  • 0adc78e23a Merge pull request #523 from wrongecho/move-email-to-function Johnny 2022-12-19 11:31:36 -05:00
  • e941cff5c6 Merge pull request #521 from wrongecho/ticket-email-notifs Johnny 2022-12-19 11:31:23 -05:00
  • 4e5729bb8a Update new ticket email to use email function, small bugfix for subject line Marcus Hill 2022-12-18 14:36:15 +00:00
  • 1ea081a175 Move email sending to a function for better error handling and code-deduplication Marcus Hill 2022-12-18 14:24:47 +00:00
  • 2e69160493 Add email notification for tickets raised via email Marcus Hill 2022-12-18 11:42:59 +00:00
  • 7ea8f106f2 Merge pull request #520 from wrongecho/software-export Johnny 2022-12-17 23:22:36 -05:00
  • b1693ef0bf Merge pull request #518 from wrongecho/ticketing-updates Johnny 2022-12-17 23:17:12 -05:00
  • 37abdf1bac Merge pull request #517 from wrongecho/calendar Johnny 2022-12-17 23:15:23 -05:00
  • a53f69ed17 Update software export: update reference to non-existent db column & add key to export Marcus Hill 2022-12-17 23:59:26 +00:00
  • 4f1a40f3fb Add functionality to send client a notification email when we raise a ticket for them Marcus Hill 2022-12-17 23:27:13 +00:00
  • 0c1baf63e9 Enable email to ticket functionality Marcus Hill 2022-12-17 23:25:09 +00:00
  • 580a6cf53e Adjust client reply type to Client, not public. Public is for agent replies that are customer visible Marcus Hill 2022-12-17 23:18:14 +00:00
  • 3e82075083 Add functionality to automatically adjust end date for new calendar events to 1 hr after the start date Marcus Hill 2022-12-17 22:20:23 +00:00
  • 100c28f024 wording update invoice list johnnyq 2022-12-17 14:20:21 -05:00
  • 0e41906af0 Shorten wording yes we already know its an invoice/quote other wording touchups johnnyq 2022-12-17 14:14:43 -05:00
  • ac4d7b2d62 Update wording on Invoice and Recurring for Correctness johnnyq 2022-12-17 13:57:53 -05:00
  • 5d543e8795 Merge pull request #516 from wrongecho/fix-date-field-issue-max Johnny 2022-12-17 13:36:33 -05:00
  • 51792a1a2f Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) Marcus Hill 2022-12-17 18:03:53 +00:00
  • 016d666dda Update feature request issue template wrongecho 2022-12-17 16:22:00 +00:00
  • d2fdc5f7d8 Spruce up the share UI modal and client logins johnnyq 2022-12-14 22:18:44 -05:00
  • 83bcae3962 Parse Tickets based off of configured Ticket Prefix johnnyq 2022-12-12 19:44:55 -05:00
  • 791125a060 Rename email parser file johnnyq 2022-12-12 19:25:47 -05:00
  • 1ad2532a7e Delete HTML Purifier .ser wrongecho 2022-12-11 19:28:24 +00:00
  • 69cf798468 Merge pull request #506 from wrongecho/ticket-invoice-hyperlink Johnny 2022-12-11 13:18:52 -05:00
  • 64c3d47ac5 Merge pull request #505 from wrongecho/quick-fix-tech-financials Johnny 2022-12-11 13:17:52 -05:00
  • 64cd53f96f Merge pull request #504 from wrongecho/contact-details-tickets Johnny 2022-12-11 13:16:25 -05:00
  • e48934791a Merge pull request #503 from wrongecho/client-avatar Johnny 2022-12-11 13:14:56 -05:00
  • 77fb936099 Merge pull request #502 from wrongecho/email-to-ticket Johnny 2022-12-11 13:14:13 -05:00
  • 13d9d6f743 Refresh some UI elements for add edit calendar events and some other UI updates including adding tickets johnnyq 2022-12-11 13:12:08 -05:00
  • db0f1f2f99 Add hyperlink to invoice when invoice raised from ticket Marcus Hill 2022-12-11 15:04:36 +00:00