itflow

account.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

asset_interface_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

asset_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

asset.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

category_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

category.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

certificate_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

certificate.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

client_model.php

Replace Function shortenClient() with shortenClientName()

2026-07-14 17:46:25 -04:00

client.php

Add user-based RBAC for API keys

2026-07-25 16:50:58 -04:00

contact_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

contact.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

credential_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

credential.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

credit.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

document_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

document.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

domain_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

domain.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

event_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

event.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

expense_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

expense.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

file.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

folder.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

income.php

Add Export CSV to the new combined income page

2026-07-28 12:26:50 -04:00

invoice_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

invoice.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

location_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

location.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

network_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

network.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

payment.php

Remove old payments and revenues and all ties to the pages as these are combined in income now

2026-07-28 12:38:29 -04:00

product_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

product.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

project.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

quote_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

quote.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

rack.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

recurring_expense.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

recurring_invoice.php

Security Fix in recurring invoices in cron

2026-07-27 18:07:15 -04:00

recurring_ticket_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

recurring_ticket.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

revenue.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

service.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

software.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

tag_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

tag.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

task.php

Add more enforceClientAccess

2026-07-24 22:49:18 -04:00

ticket.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

transaction.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

transfer_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

transfer.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

trip_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

trip.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

vendor_model.php

Update skipped function renames in anything named vendor

2026-07-14 19:09:32 -04:00

vendor.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00