itflow

account.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

asset_interface_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

asset_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

asset.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

category_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

category.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

certificate_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

certificate.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

client_model.php

Replace Function shortenClient() with shortenClientName()

2026-07-14 17:46:25 -04:00

client.php

Add Urgent Priority, move Per Client SLA Settings to notes tab in client add / edit modal remove unnessesary sla admin setting for client overide

2026-07-29 00:49:31 -04:00

contact_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

contact.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

credential_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

credential.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

credit.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

document_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

document.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

domain_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

domain.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

event_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

event.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

expense_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

expense.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

file.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

folder.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

income.php

Add Export CSV to the new combined income page

2026-07-28 12:26:50 -04:00

invoice_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

invoice.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

location_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

location.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

network_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

network.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

payment.php

Backed out of Refunds which still keeps the fix to properly set the invoice status when payment is deleted

2026-07-28 22:03:35 -04:00

product_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

product.php

Enfoce Sales Permission Read on products export

2026-07-28 17:53:13 -04:00

project.php

Add optional ticket SLAs

2026-07-29 00:00:42 -04:00

quote_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

quote.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

rack.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

recurring_expense.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

recurring_invoice.php

Security Fix in recurring invoices in cron

2026-07-27 18:07:15 -04:00

recurring_ticket_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

recurring_ticket.php

Add optional ticket SLAs

2026-07-29 00:00:42 -04:00

revenue.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

service.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

software.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

tag_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

tag.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

task.php

Add more enforceClientAccess

2026-07-24 22:49:18 -04:00

ticket.php

Add optional ticket SLAs

2026-07-29 00:00:42 -04:00

transaction.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

transfer_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

transfer.php

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

trip_model.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

trip.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00

vendor_model.php

Update skipped function renames in anything named vendor

2026-07-14 19:09:32 -04:00

vendor.php

Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function

2026-07-24 18:12:45 -04:00