AS1024
/
itflow
mirror of https://github.com/itflow-org/itflow
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,835 Commits 6 Branches 15 Tags 166 MiB
PHP 90.7%
JavaScript 9.1%
CSS 0.2%
Go to file
Johnny 893f4405ff
Merge pull request #547 from wrongecho/code-audit 
Misc changes from code security audit
 		2023-01-02 21:16:17 -05:00
.github Update feature request issue template 2022-12-17 16:22:00 +00:00
api/v1 Escape potential HTML characters in the API Key name, as this is used in logs 2023-01-02 14:38:52 +00:00
css upgraded PHPMailer, AdminLTE, chartJS, Select2 Libraries 2020-01-21 00:45:16 -05:00
dist Bump AdminLTE from 3.1 to 3.2, Bump plugins Summernote, phpMailer, clipboardjs, bootstrap, fontawesome-free, fullcalendar, inputmask, JQuery, moment, pdfmake, and more. Removed Unnessesary files from from plugins directories to reduce app size 2022-02-07 19:20:56 -05:00
js Use toastr notifications and alerts instead dedupe alert feedback code 2022-05-14 13:03:03 -04:00
plugins Delete HTML Purifier .ser 2022-12-11 19:28:24 +00:00
portal Escape potential HTML data from ticket fields 2023-01-02 15:54:37 +00:00
uploads Misc tidying code spacing & formatting in accordance with SonarCloud/PSR 2023-01-01 15:41:21 +00:00
vendor Bump AdminLTE from 3.1 to 3.2, Bump plugins Summernote, phpMailer, clipboardjs, bootstrap, fontawesome-free, fullcalendar, inputmask, JQuery, moment, pdfmake, and more. Removed Unnessesary files from from plugins directories to reduce app size 2022-02-07 19:20:56 -05:00
.gitignore DB Structure Updated 2 new settings config_backup_enable and config_backup_path. This is to fix an issue where not specifying the full backup path would cause cron to error out and not run completely 2022-03-29 12:59:42 -04:00
CODE_OF_CONDUCT.md Create CODE_OF_CONDUCT.md 2022-04-02 22:46:44 +01:00
LICENSE Remove additonal 'how to use' info 2022-01-09 22:46:27 +00:00
README.md Update README.md 2022-04-16 00:08:06 +01:00
SECURITY.md Update SECURITY.md 2022-04-16 00:10:14 +01:00
account_add_modal.php Finished File Entity Renaming process 2022-02-05 13:24:57 -05:00
account_edit_modal.php Finished File Entity Renaming process 2022-02-05 13:24:57 -05:00
accounts.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
ajax.php Escape special characters in a shared doc/file/login name to prevent potentially breaking the ajax sharing log query 2023-01-02 14:14:30 +00:00
api_key_add_modal.php Escape potential HTML characters in client name 2023-01-02 14:41:14 +00:00
base32static.php Implemented 2FA TOTP with Google Authenticator 2019-06-16 22:33:55 -04:00
blank.php Generate longer more secure Key for logins 2022-12-29 18:23:11 -05:00
calendar_add_modal.php Finished File Entity Renaming process 2022-02-05 13:24:57 -05:00
calendar_event_add_modal.php Add functionality to automatically adjust end date for new calendar events to 1 hr after the start date 2022-12-17 22:20:23 +00:00
calendar_event_edit_modal.php Refresh some UI elements for add edit calendar events and some other UI updates including adding tickets 2022-12-11 13:12:08 -05:00
calendar_events.php Add functionality to automatically adjust end date for new calendar events to 1 hr after the start date 2022-12-17 22:20:23 +00:00
categories.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
category_add_modal.php Finished File Entity Renaming process 2022-02-05 13:24:57 -05:00
category_edit_modal.php Finished File Entity Renaming process 2022-02-05 13:24:57 -05:00
category_quick_add_modal.php Finished File Entity Renaming process 2022-02-05 13:24:57 -05:00
check_login.php SQL Escape tech username. The username is added to most log entries meaning that a simple apostrophe in the name breaks all logging for the user 2023-01-02 14:54:49 +00:00
client_add_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_asset_add_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
client_asset_copy_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
client_asset_documents_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_asset_edit_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
client_asset_import_modal.php Added location import capability, cleaned up some import wording, renamed clean_file_name function to just strto_AZaz09 and clean export and sample csv client names 2022-05-13 13:29:03 -04:00
client_asset_tickets_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_assets.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_certificate_add_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
client_certificate_edit_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
client_certificates.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_contact_add_modal.php Added Important Functionality to Contacts, Cleaned up UI elements in the contacts and users modals. Added partial User and contact Invite functionality. 2022-12-31 15:54:34 -05:00
client_contact_details_modal.php Escape potential HTML in ticket prefix 2023-01-02 14:56:04 +00:00
client_contact_edit_modal.php Merge branch 'master' of github.com:itflow-org/itflow 2022-12-31 15:54:51 -05:00
client_contact_import_modal.php Added location import capability, cleaned up some import wording, renamed clean_file_name function to just strto_AZaz09 and clean export and sample csv client names 2022-05-13 13:29:03 -04:00
client_contact_invite_modal.php Fixed wording on edit invoice modal instead of payment due changed to invoice due 2023-01-02 12:18:10 -05:00
client_contacts.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_delete_modal.php Updated Delete Client confirmation modal to include all financial associated data and logs etc 2022-05-07 17:41:14 -04:00
client_document_add_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_document_details.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_document_edit_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_document_folder_add_modal.php Added Folder support to Client Documents, partially removed legacy document tagging 2022-04-27 00:53:45 -04:00
client_document_folder_rename_modal.php Added Rename and Delete folder capabilities to documents and some minor UI cleanup 2022-04-27 22:31:15 -04:00
client_document_view_modal.php Finished File Entity Renaming process 2022-02-05 13:24:57 -05:00
client_documents.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_domain_add_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
client_domain_edit_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
client_domains.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_edit_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_events.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_file_add_modal.php Added jpeg as an accepted file upload type under client files 2022-11-17 14:05:49 -05:00
client_file_view_modal.php Replace depreciated <center> tag with CSS 2022-04-19 23:13:44 +01:00
client_files.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_invoices.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_location_add_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_location_edit_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_location_import_modal.php Added location import capability, cleaned up some import wording, renamed clean_file_name function to just strto_AZaz09 and clean export and sample csv client names 2022-05-13 13:29:03 -04:00
client_locations.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_login_add_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_login_edit_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_login_import_modal.php Added Client Logins Import 2022-05-13 14:42:46 -04:00
client_logins.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_logs.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_network_add_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_network_edit_modal.php Cleaned up the new JS edit Modal sperating Javascript vars with camelCase and php var with seperate_words 2022-02-19 16:17:07 -05:00
client_networks.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_overview.php Small tidy 2023-01-01 14:15:31 +00:00
client_payments.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_quotes.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_recurring_invoices.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_scheduled_tickets.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_service_add_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_service_edit_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
client_service_view_modal.php Tidy comment 2023-01-02 14:57:46 +00:00
client_services.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_shared_items.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_side_nav.php Add yellow circle to certificate nav menu if expiring 2023-01-01 14:12:44 +00:00
client_software.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_software_add_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
client_software_edit_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
client_tickets.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_trips.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
client_vendors.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
clients.php Change stripslashes to strip_tags for better html sanitization 2023-01-02 19:28:24 +00:00
companies.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
company_add_modal.php Added Locale option for company, this works in conjunction with the way the currency is displayed 2022-02-18 11:14:14 -05:00
company_edit_modal.php Added Locale option for company, this works in conjunction with the way the currency is displayed 2022-02-18 11:14:14 -05:00
cron.php Change include to require 2023-01-02 16:07:51 +00:00
cron_ticket_email_parser.php Update new ticket email to use email function, small bugfix for subject line 2022-12-18 14:36:15 +00:00
dashboard_financial.php Eworked year selector on the dashboard 2023-01-02 16:03:52 -05:00
dashboard_technical.php Tidy 2023-01-01 14:40:06 +00:00
database_updates.php Adjust contact_important field to after contact_password_reset_token instead 2023-01-01 11:26:58 +00:00
database_version.php Add contact_important DB field to database updater 2023-01-01 11:25:12 +00:00
db.sql Added new db.sql structure dump for new installs for the the new SQL fields. 2022-12-19 11:43:47 -05:00
expense_add_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
expense_copy_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
expense_edit_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
expense_export_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
expense_refund_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
expenses.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
footer.php Use toastr notifications and alerts instead dedupe alert feedback code 2022-05-14 13:03:03 -04:00
functions.php Generate longer more secure Key for logins 2022-12-29 18:23:11 -05:00
get_credential.php Misc tidying code spacing & formatting in accordance with SonarCloud/PSR 2023-01-01 15:41:21 +00:00
get_settings.php Add email to ticket functionality - beta 2022-12-11 01:34:15 +00:00
global.css Added selectable num of records on each listing page, fixed up Pagination Records UI, added new stripe library, further worked on stripe integration, fixed mispelling in client details 2021-02-10 11:21:38 -05:00
global_search.php Remove some tags there and here some more output formatting all thanks to the great security researcher @indevi0us for pointing these out to us. 2022-12-21 21:31:51 -05:00
guest_download_file.php Add file name to shared file download logs 2023-01-02 18:35:07 +00:00
guest_footer.php Removed extra > in guest view footer 2021-02-27 14:09:26 -05:00
guest_header.php Added meta no index to all headers so pages dont get indexed by Google this only affects people that dont have a robots.txt at HTRoot hence people that are running itflow in a subdir like example.com/itflow 2022-09-21 12:38:22 -04:00
guest_pay_invoice.php Prevent access to unused file 2023-01-02 18:38:21 +00:00
guest_post.php DB Updated removed history_date from history table as this is redundant with history_created_at 2022-03-04 00:41:34 -05:00
guest_view_invoice.php Shorten wording yes we already know its an invoice/quote other wording touchups 2022-12-17 14:14:43 -05:00
guest_view_item.php Add item name to shared file view logs 2023-01-02 18:47:06 +00:00
guest_view_quote.php Shorten wording yes we already know its an invoice/quote other wording touchups 2022-12-17 14:14:43 -05:00
header.php Remove commented calendar CSS from header as it's loaded by itself on the relevant pages 2023-01-02 19:06:12 +00:00
inc_alert_feedback.php Use toastr notifications and alerts instead dedupe alert feedback code 2022-05-14 13:03:03 -04:00
inc_all.php Code deduplication/tidying 2022-04-14 19:49:18 +01:00
inc_all_client.php Small tidy 2023-01-01 14:15:31 +00:00
inc_all_reports.php Seperated Reports in its own side nav menu to allow more reports 2022-02-22 15:01:13 -05:00
inc_all_settings.php Change manual admin role verification to use the function 2023-01-02 19:10:00 +00:00
inc_client_top_head.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
inc_wrapper.php Use toastr notifications and alerts instead dedupe alert feedback code 2022-05-14 13:03:03 -04:00
index.php Made the php includes much more modular and simpler by lumping them all in 1 file inc_all.php instead of all over the place 2022-02-22 00:29:39 -05:00
invoice.php Shorten wording yes we already know its an invoice/quote other wording touchups 2022-12-17 14:14:43 -05:00
invoice_add_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
invoice_copy_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
invoice_edit_modal.php Fixed wording on edit invoice modal instead of payment due changed to invoice due 2023-01-02 12:18:10 -05:00
invoice_note_modal.php Fixed Edit Client Contact Title it was missing 2021-08-29 14:01:04 -04:00
invoice_payment_add_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
invoice_recurring_add_modal.php Finished File Entity Renaming process 2022-02-05 13:24:57 -05:00
invoices.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
item_edit_modal.php Declare more floatvals 2022-12-05 23:10:34 -05:00
login.php SQL Escape tech username in session. The username is added to most log entries meaning that a simple apostrophe in the name breaks all logging for the user 2023-01-02 19:22:21 +00:00
logs.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
notifications.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
notifications_dismissed.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
pagination.php Code deduplication/tidying 2022-04-14 19:49:18 +01:00
pagination_head.php Remove some tags there and here some more output formatting all thanks to the great security researcher @indevi0us for pointing these out to us. 2022-12-21 21:31:51 -05:00
payments.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
post.php - Validate user email before sending welcome message 2023-01-02 21:06:51 +00:00
product_add_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
product_edit_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
products.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
quote.php Shorten wording yes we already know its an invoice/quote other wording touchups 2022-12-17 14:14:43 -05:00
quote_add_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
quote_copy_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
quote_edit_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
quote_note_modal.php Fixed Edit Client Contact Title it was missing 2021-08-29 14:01:04 -04:00
quote_to_invoice_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
quotes.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
recurring_invoice.php Shorten wording yes we already know its an invoice/quote other wording touchups 2022-12-17 14:14:43 -05:00
recurring_invoice_add_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
recurring_invoice_edit_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
recurring_invoice_edit_next_date_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
recurring_invoice_note_modal.php Finished File Entity Renaming process 2022-02-05 13:24:57 -05:00
recurring_invoices.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
report_expense_by_vendor.php Cleanup Margins in Client and Vendor Reports as well as add currency 2022-12-06 21:31:44 -05:00
report_expense_summary.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
report_income_by_client.php Cleanup Margins in Client and Vendor Reports as well as add currency 2022-12-06 21:31:44 -05:00
report_income_summary.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
report_profit_loss.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
report_tax_summary.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
reports_side_nav.php Side nav UI update bigger go back more margin between menu headers, added icons to reports side nav 2022-09-19 21:14:26 -04:00
revenue_add_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
revenue_edit_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
revenues.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
rfc6238.php Adjust RFC6283 getTokenCode to only show one token at a time. 2022-04-24 13:48:27 +01:00
robots.txt First commit 2019-03-13 17:40:00 +00:00
scheduled_ticket_add_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
scheduled_ticket_edit_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
scheduled_tickets.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
settings_alerts.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
settings_api.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
settings_backup.php - Validate user email before sending welcome message 2023-01-02 21:06:51 +00:00
settings_defaults.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
settings_integrations.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
settings_invoice.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
settings_mail.php Add email to ticket functionality - beta 2022-12-11 01:34:15 +00:00
settings_modules.php Update settings File naming consistancy to match the rest of ITFlow naming 2022-09-21 12:30:04 -04:00
settings_online_payment.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
settings_quote.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
settings_side_nav.php Moved accounts to settings page as its not accessed much and is a much better place for it, moved some settings menus around 2022-11-09 18:19:48 -05:00
settings_tag_add_modal.php Update settings File naming consistancy to match the rest of ITFlow naming 2022-09-21 12:30:04 -04:00
settings_tag_edit_modal.php Update settings File naming consistancy to match the rest of ITFlow naming 2022-09-21 12:30:04 -04:00
settings_tags.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
settings_tax_add_modal.php Update settings File naming consistancy to match the rest of ITFlow naming 2022-09-21 12:30:04 -04:00
settings_tax_edit_modal.php Update settings File naming consistancy to match the rest of ITFlow naming 2022-09-21 12:30:04 -04:00
settings_taxes.php Remove some tags there and here some more output formatting all thanks to the great security researcher @indevi0us for pointing these out to us. 2022-12-21 21:31:51 -05:00
settings_ticket.php Enable email to ticket functionality 2022-12-17 23:25:09 +00:00
settings_update.php Update settings File naming consistancy to match the rest of ITFlow naming 2022-09-21 12:30:04 -04:00
setup.php better keygen for masterkey on setup 2022-12-29 18:29:14 -05:00
share_modal.php Spruce up the share UI modal and client logins 2022-12-14 22:18:44 -05:00
side_nav.php Tidy sidenav too 2023-01-01 14:42:40 +00:00
test_stripe_client.js Rename & disable unused stripe test page 2023-01-02 12:56:51 +00:00
test_stripe_guest_checkout.php Rename & disable unused stripe test page 2023-01-02 12:56:51 +00:00
ticket.php Revert "Hide invoice ticket button for techs" 2022-12-29 22:29:54 +00:00
ticket_add_modal.php Refresh some UI elements for add edit calendar events and some other UI updates including adding tickets 2022-12-11 13:12:08 -05:00
ticket_edit_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
ticket_invoice_add_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
ticket_merge_modal.php Updated Ticket Icons everywhere to a more suitable icon life-ring instead of a carnival ticket 2022-10-01 15:00:48 -04:00
ticket_reply_edit_modal.php Fix regression: ticket replies not showing when time is not tracked due to new edit ability 2022-12-11 02:03:15 +00:00
tickets.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
top_nav.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
transfer_add_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
transfer_edit_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
transfers.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
trip_add_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
trip_copy_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
trip_edit_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
trip_export_modal.php Set a max date attribute for date input fields to prevent/discourage them going over 4 characters (client side validation) 2022-12-17 18:03:53 +00:00
trips.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
user_add_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
user_archive_modal.php CSRF Token 2022-05-01 18:43:53 +01:00
user_companies_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
user_edit_modal.php Format output for the proper code syntax, this should fix many various issues with output formatting and page breakage 2022-12-02 19:58:21 -05:00
user_invite_modal.php Added Important Functionality to Contacts, Cleaned up UI elements in the contacts and users modals. Added partial User and contact Invite functionality. 2022-12-31 15:54:34 -05:00
user_profile.php - Validate user email before sending welcome message 2023-01-02 21:06:51 +00:00
users.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00
vendor_add_modal.php Updates to Vendors added additional fields such as PIN, Support Hours, SLA etc, removed Vendor Address details not really needed for vendors. Beginning works of Vendor Templates aka Global Vendors this will make it easy to update common vendors 2022-10-14 21:48:24 -04:00
vendor_edit_modal.php Updates to Vendors added additional fields such as PIN, Support Hours, SLA etc, removed Vendor Address details not really needed for vendors. Beginning works of Vendor Templates aka Global Vendors this will make it easy to update common vendors 2022-10-14 21:48:24 -04:00
vendors.php Replace stripslashes with strip_tags 2023-01-02 14:44:46 +00:00

README.md

Contributors Stargazers Issues Commits GPL License

ITFlow

IT documentation, ticketing and accounting system for small MSPs.

View demo
Username: demo@demo | Password: demo

About · Docs · Forum · Report Bug · Request Feature

About

A free ITGlue alternative, with additional ticketing / accounting features.

ITFlow

The Problem

  • You're a busy MSP with 101 things to do.
  • Information about your clients is unorganised and unstructured: scattered in random tickets or folders - when you do eventually find it, it's out of date.
  • For some issues, you spend longer looking for the relevant documentation than actually working the ticket.
  • On top of the technical day to day, you also have to take care of the financial side of the business - consistent pricing, quotes/invoicing, and accounting.

The Solution: ITFlow

  • ITFlow consolidates common MSP needs (documentation, ticketing, and accounting) into one system

In Beta

  • This project is still in early beta and is considered a work in progress. Many changes are being performed and may cause breakage upon updates.
  • Currently, we strongly recommend against storing confidential information in ITFlow; ITFlow has not undergone a third-party security assessment.
  • We are hoping to have a stable 1.0 release by Dec 2022.

Built With

  • Backend / PHP libs

    • PHP
    • MariaDB
    • PHPMailer
    • HTML Purifier

  • CSS

    • Bootstrap
    • AdminLTE
    • fontawesome

  • JS Libraries

    • chart.js
    • moments.js
    • jQuery
    • pdfmake
    • Select2
    • SummerNote
    • FullCalendar.io

Getting Started / Installation

ITFlow is self-hosted. There is a full installation guide in the docs, but the main steps are:

  1. Install a LAMP stack (Linux, Apache, MariaDB, PHP) 
    sudo apt install git apache2 php libapache2-mod-php php-intl php-mysqli php-curl mariadb-server
  2. Clone the repo 
    git clone https://github.com/itflow-org/itflow.git /var/www/html
  3. Create a MariaDB Database
  4. Point your browser to your HTTPS web server to begin setup

Key Features

  • Client documentation - assets, contacts, domains, docs, files, passwords, and more
  • Accounting / Billing - finance dashboard, quotes, invoices, accounting, expenses, etc
  • Client Portal - self service quote/invoice/ticket management for clients
  • Alerting - account balance, invoices, domain/SSL renewals

Roadmap / Future to-do

  • MeshCentral (Export common software applications to Software)
  • CalDAV to integrate with 3rd party calendars
  • CardDAV to integrate with 3rd party Address books
  • Stripe Integration for online payments
  • Recent caller toast alerts to click and bring up the clients account right away
  • FIDO2 WebAuthn Support for passwordless auth (TPM Fingerprint), (USB Hardware keys such as Yubikey)

See the forum and the open issues for a full list of proposed features & known issues.

Support & Contributions

Forum

For help using ITFlow, feature requests, and general ideas / discussions please use the community forum. For bugs, please raise an issue.

Contributing

If you are able to make a contribution that would make ITFlow better, please fork the repo and create a pull request. Please make sure you're following our code standards. For large changes / new features, please discuss the issue with other contributors first.

Contributors

License

ITFlow is distributed "as is" under the GPL License, WITHOUT WARRANTY OF ANY KIND. See LICENSE for details.