Commit Graph

  • d0483f2472 Allow csv file upload Marcus Hill 2022-01-07 18:36:55 +00:00
  • c5e976d995 Add index.php files to upload directories to prevent file traversal Marcus Hill 2022-01-07 18:35:23 +00:00
  • a392ac0d85 Fix user initials in ticket reply Marcus Hill 2022-01-07 16:17:04 +00:00
  • 3eff9e3d48 Add count to asset import via csv Marcus Hill 2022-01-07 16:01:30 +00:00
  • 87faebd90d Add functionality to for adding new assets via API Marcus Hill 2022-01-07 15:51:22 +00:00
  • d420cd691d Initial API restructure Marcus Hill 2022-01-07 15:21:09 +00:00
  • 2bfb50616c Merge pull request #248 from wrongecho/import_asset_csv Johnny 2022-01-06 20:20:48 -05:00
  • 5dc9eb4d1d Add basic asset import functionality Marcus Hill 2022-01-07 00:58:38 +00:00
  • b8ea7ca2f9 Merge pull request #247 from aftechro/patch-1 Johnny 2022-01-06 19:35:21 -05:00
  • f476d0ea7f Update client_contacts.php AFTECH.RO 2022-01-07 00:26:24 +00:00
  • a4b264143a Merge pull request #245 from aftechro/tickets.php Johnny 2022-01-06 19:14:56 -05:00
  • f82ba721ba Merge pull request #246 from aftechro/client_tickets.php Johnny 2022-01-06 19:13:33 -05:00
  • 5170decf72 Merge pull request #240 from wrongecho/ticket-status Johnny 2022-01-06 19:12:47 -05:00
  • 1c487b225c Update client_tickets.php AFTECH.RO 2022-01-06 23:40:40 +00:00
  • 97f49826bf Update tickets.php AFTECH.RO 2022-01-06 23:23:47 +00:00
  • d37dd77637 Update ticket status in database after a ticket reply. Marcus Hill 2022-01-06 22:59:23 +00:00
  • 8e8b28df40 Fixed Querying wihtin Invoice status johnnyq 2022-01-06 11:21:10 -05:00
  • 0047198bcd Added hidden status variable upon search form POSt under tickets to allow querying within a status johnnyq 2022-01-05 22:40:26 -05:00
  • c6bafa9420 Enhanced @wrongcho Link ticket assets Merge johnnyq 2022-01-05 22:28:29 -05:00
  • 16344aa1a6 update DB Structure set to primary keys for documents_tagged move client_id last for consistancy as its a foriegn key for document_tags johnnyq 2022-01-05 21:38:47 -05:00
  • 62470c1c45 Merge pull request #239 from wrongecho/doc-tags Johnny 2022-01-05 21:27:31 -05:00
  • 733e56cd8c Merge pull request #236 from wrongecho/client-bugs Johnny 2022-01-05 21:25:09 -05:00
  • 3455d2c576 Merge pull request #235 from wrongecho/readme-typo Johnny 2022-01-05 21:23:50 -05:00
  • 77d7e7ba0d Add tag functionality to documents Marcus Hill 2022-01-05 21:58:10 +00:00
  • 93853b77b4 Add confirmation for client deletion from the client summary banner Marcus Hill 2022-01-05 14:27:20 +00:00
  • a48e3029f1 Ensure canned_date is defined before it is referenced, to prevent errors Marcus Hill 2022-01-05 14:21:06 +00:00
  • a4497dd901 Require primary contact be populated when client is created. Otherwise, records such as tickets loop/fail to be created (due to no contact) Marcus Hill 2022-01-05 14:18:18 +00:00
  • e298883e51 Fix readme typos/slight rewording Marcus Hill 2022-01-05 14:05:39 +00:00
  • e6c2f90e02 Merge pull request #233 from wrongecho/tickets Johnny 2022-01-05 00:47:23 -05:00
  • 6c6150011a Merge pull request #234 from wrongecho/alert-type Johnny 2022-01-05 00:46:54 -05:00
  • 656bb3c5d5 Merge pull request #231 from wrongecho/ticket-assets Johnny 2022-01-05 00:46:32 -05:00
  • 51a4469cfa Set default alert type to primary, as sometimes we set alert_message in session, but not alert_type, causing errors Marcus Hill 2022-01-04 22:38:50 +00:00
  • 913d41e4b3 Tidy/Fix undefine variable errors, improve open/closed ticket filtering, still needs some work as open/close state is lost after search Marcus Hill 2022-01-04 21:55:45 +00:00
  • f6900ae993 Allow linking of asset to a ticket via edit modal Marcus Hill 2022-01-04 20:22:27 +00:00
  • 57517f5122 Merge branch 'master' of https://github.com/wrongecho/itflow Marcus Hill 2022-01-04 17:35:38 +00:00
  • b5cee625ce Merge branch 'master' of https://github.com/johnnyq/itflow Marcus Hill 2022-01-04 17:35:05 +00:00
  • 670795431a Merge branch 'johnnyq:master' into master wrongecho 2022-01-04 17:31:51 +00:00
  • 7112463e41 Commit Tidy allow public_cert to be null and move public_cert before notes johnnyq 2022-01-04 11:35:34 -05:00
  • c59e2e938c Merge pull request #229 from wrongecho/config-writeable Johnny 2022-01-04 11:25:27 -05:00
  • 82ba4d3b5a Merge pull request #230 from wrongecho/cert-add-key Johnny 2022-01-04 11:24:00 -05:00
  • 21a22cb309 Ignore Marcus Hill 2022-01-04 03:33:47 +00:00
  • ae98902a96 Add support for storing client certificate public key Marcus Hill 2022-01-04 03:32:50 +00:00
  • dfbf0c788a Check that config.php is writable at the start of setup. Marcus Hill 2022-01-04 03:21:04 +00:00
  • de883f9ff5 Fixed Add Recurring and Edit Recurring Invoices going to a blank screen after submit this was due to a missing history_status var, Removed Activate and Deactivate from recurring list and the buttons from recurring details as this can be modified using edit recurring, Removed Redundant Force Send action on recurring list views, this can be accessed by going to the recurring details. johnnyq 2022-01-02 13:39:25 -05:00
  • b8a1af2e0f Show Ticket Reply Modified date if applicable johnnyq 2022-01-02 01:50:18 -05:00
  • 5ecac729a8 Fixed add ticket logging johnnyq 2022-01-02 01:43:44 -05:00
  • 466b7a51e4 removed logging client id key for global vendor johnnyq 2022-01-02 00:58:50 -05:00
  • b2cef73dad Removed Old Logging function under edit vendor johnnyq 2022-01-02 00:56:28 -05:00
  • ebb37c0f06 Fix Spelling mistake johnnyq 2022-01-02 00:28:38 -05:00
  • d5fcfeb417 Setup Fixes regarding user checks johnnyq 2022-01-02 00:14:48 -05:00
  • 2c76573471 Fixed Syntax error under setup johnnyq 2022-01-01 18:30:06 -05:00
  • 02f247a047 Incorrect DBHost Var Fix johnnyq 2022-01-01 17:39:49 -05:00
  • 0250ac0623 Forgot full php tag johnnyq 2022-01-01 17:27:31 -05:00
  • cf3c0a6410 Fixed a vulnerability in the setup.php file and other code cleanups. Thanks to the person that wishes to remain anonymous for reporting and providing a patch Also added a notice to readme to not use this web app during beta for production use johnnyq 2022-01-01 17:02:31 -05:00
  • a70105e731 Started Adding Detailed Assets more alert and audit logging work johnnyq 2022-01-01 15:26:31 -05:00
  • ff0ce6077a Removed Redundant Contact and location under edit client. johnnyq 2021-12-31 16:24:28 -05:00
  • e978cd142e More Audit Logging work, fixed a bunch of small bugs along the way johnnyq 2021-12-31 15:33:41 -05:00
  • cd7ecc9593 More Audit Logging and alerts cleanup johnnyq 2021-12-28 22:13:53 -05:00
  • 119e491865 Added Refferal Datasets on new company johnnyq 2021-12-28 20:54:17 -05:00
  • 05702c4a1b More Audit logging fixes and added proper permissions and added common datasets when a company is added johnnyq 2021-12-28 18:53:48 -05:00
  • 15d95a3647 Set Feedback Alerts to disappear after 4 seconds instead of 2 seconds johnnyq 2021-12-28 18:20:15 -05:00
  • 33400894d5 Updates and Fixings to Audit Logs, added client tag selection for mass email campaigns johnnyq 2021-12-28 18:16:54 -05:00
  • c04353f284 Added not bull on db structure update for tag_type johnnyq 2021-12-27 12:14:56 -05:00
  • 484d4fff82 Added Tag Type to allow expansion of tagging support for other entities in the future johnnyq 2021-12-27 12:06:37 -05:00
  • d23d455cd9 DB update The long awaited Client Tag support is finally complete along with icon support and color badges this has replaced the user maintenance field to allow further customization, fixed tickets as it was using the old permission system. johnnyq 2021-12-27 11:42:13 -05:00
  • a9fb11e3ef Fixed client details page as functions was declared twice johnnyq 2021-12-23 10:58:16 -05:00
  • 308bf0967f header got removed saomehow restored it johnnyq 2021-12-22 17:28:17 -05:00
  • 25b5cb3d40 Moved Functions above check login so that check login can use some of the functions, Moved Fingerprinting to check login instead of in functions as its a more appropriate place johnnyq 2021-12-22 17:24:54 -05:00
  • 610eeca0a1 DB Update More work on client tags johnnyq 2021-12-22 14:34:45 -05:00
  • 40c3587789 Remove Outdated DB Changes upon update as ITFlow requires a full reinstallation as of 12-22-2021 will add more as code changes johnnyq 2021-12-22 14:10:52 -05:00
  • 73133f62ef Fix User Role when adding a user johnnyq 2021-12-22 14:07:58 -05:00
  • d752a57132 Var Fixes in setup johnnyq 2021-12-22 14:00:26 -05:00
  • 1983c9f373 Mis-spelling causing breakge johnnyq 2021-12-22 13:48:22 -05:00
  • 89242870ca Fix Setup Incorrect Table Name for User Company Relation johnnyq 2021-12-22 13:41:56 -05:00
  • 64430a20ee Removed Role ID from users table it was unused and was breaking the ability to add users johnnyq 2021-12-22 13:36:38 -05:00
  • 997b07c822 Temp Removed Session User agent login vars from functions as its breaking Setup.php because of the reliance on an active mysql connection johnnyq 2021-12-22 13:20:22 -05:00
  • 074f1612f4 Merge branch 'master' of github.com:johnnyq/itflow johnnyq 2021-12-22 13:09:09 -05:00
  • ba584a57e0 BREAKING CHANGES - Many DB Updates - NOT POSSIBLE TO EASILY UPGRADE TO THIS - Completely reworked User Company Access Permssions, started working on Client Role so Clients can access their data and a bunch of other small fixes johnnyq 2021-12-22 13:08:24 -05:00
  • 163ec8ad6f Create FUNDING.yml Johnny 2021-12-16 12:10:23 -05:00
  • 78f1e75eda Fix #216 Updated Currency codes everywhere not just in a few places johnnyq 2021-12-14 13:00:24 -05:00
  • f2763476a3 Fix #216 Tax Percent Float limitation johnnyq 2021-12-14 11:58:17 -05:00
  • 4604280efe This Update will break your login as we updated the password hash from MD5 to a salted hash using hash_password and password_verify techniques, fixed an unauthenticated persistent XSS Vulnerbility which would affect if someone spoofed their IP with a javascript code and then a logged in read the logs. The flaw was discovered by @bambilol #214 also fixed some other bugs. johnnyq 2021-12-13 12:21:55 -05:00
  • ed2dfa1b74 Disable Tagging for now as its still WIP johnnyq 2021-12-12 16:22:18 -05:00
  • cf0946439e Broked it now fixed it johnnyq 2021-12-12 16:16:58 -05:00
  • 17833fb6dd More Code Fixups and blips to resolve continuing to comb through the code johnnyq 2021-12-12 16:09:51 -05:00
  • faf39fc84a Code cleanup and fix possible injections when a trusted user is logged in thanks to mwdmeyer, constant_chaos, disclosure5 and rightwayround from /r/msp for pointing these issues out johnnyq 2021-12-12 13:16:26 -05:00
  • 82ead8a755 Reduced Font size of current version johnnyq 2021-12-12 02:03:24 -05:00
  • aaf65db6f3 Renamed MacOS X to just MacOS for user agent detection johnnyq 2021-12-12 02:01:30 -05:00
  • 7c0cce413f Missing Roundtrip label under edit trip johnnyq 2021-12-12 01:52:09 -05:00
  • b3b1a44228 Forgot the SQL Connection johnnyq 2021-12-12 01:27:35 -05:00
  • 9e9bb50db0 Fixed a SQL injection could only work if you had a login thanks disclosure5 for pointing this out from reddit/r/msp johnnyq 2021-12-12 01:22:39 -05:00
  • efb6372190 Fix #210 Password output under client logins johnnyq 2021-12-10 13:35:48 -05:00
  • 0b15aeedb5 Reworked last login under user-settings and users, made view more work johnnyq 2021-12-09 17:48:18 -05:00
  • f02e94d585 Started adding IP and User agent to audit logs, log when a user logs out, Merged logout into post.php johnnyq 2021-12-09 16:12:57 -05:00
  • a5a8fbc319 Fix a bunch of PHP Errors regarding various variable issues non existent vars, cleaned up client export documentation and export assets etc johnnyq 2021-12-09 15:26:21 -05:00
  • d78a24f3a5 Added git ids to the db structure update under updates johnnyq 2021-12-09 11:15:19 -05:00
  • 610875a3b3 Fix Alter Query Syntax for updating Table structure johnnyq 2021-12-09 11:11:50 -05:00
  • 16447709d8 added DB Structure changes during update johnnyq 2021-12-09 11:07:54 -05:00
  • c88e6b851a DB Structure Change - Removed the useless Low Account Balance alert johnnyq 2021-12-08 22:32:05 -05:00
  • 85cdc42d0f DB Structure update, Hide Passwords under client logins until eyeball is clicked to reveal password, prevent the looking over your shoulder type attack, Added Install Date to Assets, reworked client assets listing to include Operating System and Install Date johnnyq 2021-12-08 22:15:20 -05:00