johnnyq 565aff35f6 Set SameSite=Lax on the session cookie ...

Applied at all seven session_start sites. keepalive.php and guest_post.php
had no cookie flags at all and now set httponly and secure too.

2026-07-24 14:09:52 -04:00

..

custom

Update .gitignore and add custom directories to /admin /client /guest /user Example Documentation coming soon

2025-09-22 19:33:40 -04:00

includes

Set SameSite=Lax on the session cookie

2026-07-24 14:09:52 -04:00

assets.php

Update the rest of the PHP functions to use camelCase

2026-07-23 17:39:06 -04:00

certificates.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

contact_add.php

Add CSRF Checks in the client portal

2026-03-07 13:11:08 -05:00

contact_edit.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

contacts.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

document.php

Add secure file handler for client ticket attachment and file view along with client and contact permission isolation, add the handler links in asset and contact

2026-07-15 18:35:32 -04:00

documents.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

domains.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

file.php

Add secure file handler for client ticket attachment and file view along with client and contact permission isolation, add the handler links in asset and contact

2026-07-15 18:35:32 -04:00

functions.php

Move Guest Function formatBytes to root shared functions and use in files and files section in contact

2026-07-16 20:25:18 -04:00

index.php

Update the rest of the PHP functions to use camelCase

2026-07-23 17:39:06 -04:00

invoices.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

login_microsoft.php

Set SameSite=Lax on the session cookie

2026-07-24 14:09:52 -04:00

login_reset.php

Set SameSite=Lax on the session cookie

2026-07-24 14:09:52 -04:00

post.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

profile.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

quotes.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

recurring_invoices.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

saved_payment_methods.php

Use stripe_init include to init stripe and updated code everywhere

2026-07-23 13:00:01 -04:00

ticket_add.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

ticket_attachment.php

Add secure file handler for client ticket attachment and file view along with client and contact permission isolation, add the handler links in asset and contact

2026-07-15 18:35:32 -04:00

ticket_view_all.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

ticket.php

Add secure file handler for client ticket attachment and file view along with client and contact permission isolation, add the handler links in asset and contact

2026-07-15 18:35:32 -04:00

tickets.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

unpaid_invoices.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00