mirror/opensourcepos
1
0 Fork 0
mirror of https://github.com/opensourcepos/opensourcepos.git synced 2026-10-05 00:55:19 -04:00
Code Issues Packages Projects Releases Wiki Activity
6,709 Commits 60 Branches 40 Tags
bcff389b344f427ac79b1ff81eaa8261697bedbb
Commit Graph
6709 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
objec bcff389b34 Mailchimp config view 
- Update MailchimpPlugin.php to use config path
- Created Mailchimp config view.

Signed-off-by: objec <objecttothis@gmail.com>
 2026-04-08 13:53:16 +04:00
objec deb122246c Updated Plugin manage controller 
- Removed whitespace
- Replaced hardcoded csrf_token_name with csrf_token()
- Added empty line to the end of the file

Signed-off-by: objec <objecttothis@gmail.com>
 2026-04-08 13:51:32 +04:00
objec e1b76d2e0d Update MailchimpPlugin.php 
- Replaced full declarations with an import
- Added exception to use the return value of subscribeCustomer()

Signed-off-by: objec <objecttothis@gmail.com>
 2026-04-08 13:33:32 +04:00
objec 84ea65b1bd Added check for plugin table before attempting to load plugins 
Signed-off-by: objec <objecttothis@gmail.com>
 2026-04-08 12:19:24 +04:00
objec a19fe03ecf Whitespace and refactoring corrections 
Signed-off-by: objec <objecttothis@gmail.com>
 2026-04-08 11:39:29 +04:00
objec 15227523d9 Correct function naming to use PSR compliant naming conventions 
Signed-off-by: objec <objecttothis@gmail.com>
 2026-04-08 11:37:32 +04:00
objec 1587d4276d Merge remote-tracking branch 'origin/master' into plugin-system-fresh 2026-04-08 11:06:24 +04:00
objecttothis ce7a3ce341 Translated using Weblate (Swahili (Tanzania)) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/sw_TZ/
 2026-04-07 20:47:37 +02:00
objecttothis d99d2855ec Translated using Weblate (Swahili (sw_KE)) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/sw_KE/
 2026-04-07 20:47:37 +02:00
objecttothis 96b4b24d9b Translated using Weblate (Kurdish (Central)) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/ckb/
 2026-04-07 20:47:37 +02:00
objecttothis 871231e406 Translated using Weblate (Ukrainian) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/uk/
 2026-04-07 20:47:37 +02:00
objecttothis e62477ed4e Translated using Weblate (Tamil) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/ta/
 2026-04-07 20:47:37 +02:00
objecttothis 2a0997f267 Translated using Weblate (Bosnian) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/bs/
 2026-04-07 20:47:37 +02:00
objecttothis 1ca8effe08 Translated using Weblate (Chinese (Traditional)) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/zh_Hant/
 2026-04-07 20:47:37 +02:00
objecttothis ed2c975ad5 Translated using Weblate (Chinese (Simplified)) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/zh_Hans/
 2026-04-07 20:47:37 +02:00
objecttothis 403feed3e5 Translated using Weblate (Vietnamese) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/vi/
 2026-04-07 20:47:37 +02:00
objecttothis 7f6f36210c Translated using Weblate (Turkish) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/tr/
 2026-04-07 20:47:37 +02:00
objecttothis 1121ced532 Translated using Weblate (Tagalog) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/tl/
 2026-04-07 20:47:37 +02:00
objecttothis 632a18212d Translated using Weblate (Swedish) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/sv/
 2026-04-07 20:47:37 +02:00
objecttothis 3208f15244 Translated using Weblate (Russian) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/ru/
 2026-04-07 20:47:37 +02:00
objecttothis 079b809622 Translated using Weblate (Romanian) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/ro/
 2026-04-07 20:47:37 +02:00
objecttothis d685e09c29 Translated using Weblate (Portuguese (Brazil)) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/pt_BR/
 2026-04-07 20:47:37 +02:00
objecttothis 149c27d60f Translated using Weblate (Polish) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/pl/
 2026-04-07 20:47:37 +02:00
objecttothis 57b7705cd4 Translated using Weblate (Dutch) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/nl/
 2026-04-07 20:47:37 +02:00
objecttothis e8951422c0 Translated using Weblate (Dutch (Belgium)) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/nl_BE/
 2026-04-07 20:47:37 +02:00
objecttothis 8afc57fcf4 Translated using Weblate (Lao) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/lo/
 2026-04-07 20:47:37 +02:00
objecttothis 7af64a9a21 Translated using Weblate (Khmer (Central)) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/km/
 2026-04-07 20:47:37 +02:00
objecttothis 46d5781498 Translated using Weblate (Italian) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/it/
 2026-04-07 20:47:37 +02:00
objecttothis 66b61c0554 Translated using Weblate (Indonesian) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/id/
 2026-04-07 20:47:37 +02:00
objecttothis 6b97131c48 Translated using Weblate (Hungarian) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/hu/
 2026-04-07 20:47:37 +02:00
objecttothis a4c19a3c2c Translated using Weblate (Croatian) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/hr/
 2026-04-07 20:47:37 +02:00
objecttothis 7ca8c9561a Translated using Weblate (Hebrew) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/he/
 2026-04-07 20:47:37 +02:00
objecttothis 4fac5d9198 Translated using Weblate (French) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/fr/
 2026-04-07 20:47:37 +02:00
objecttothis 221995b6db Translated using Weblate (Persian) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/fa/
 2026-04-07 20:47:37 +02:00
objecttothis 91dbe5b869 Translated using Weblate (Spanish (Mexico)) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/es_MX/
 2026-04-07 20:47:37 +02:00
objecttothis afd908327b Translated using Weblate (Spanish) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/es/
 2026-04-07 20:47:37 +02:00
objecttothis cfde66481d Translated using Weblate (English (United Kingdom)) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/en_GB/
 2026-04-07 20:47:37 +02:00
objecttothis 80f00c8552 Translated using Weblate (German) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/de/
 2026-04-07 20:47:37 +02:00
objecttothis dbdf4db4fb Translated using Weblate (German (Switzerland)) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/de_CH/
 2026-04-07 20:47:37 +02:00
objecttothis 64004db271 Translated using Weblate (Danish) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/da/
 2026-04-07 20:47:37 +02:00
objecttothis 7f20a5dd4c Translated using Weblate (Czech) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/cs/
 2026-04-07 20:47:37 +02:00
objecttothis d7a276b488 Translated using Weblate (Bulgarian) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/bg/
 2026-04-07 20:47:37 +02:00
objecttothis 57dbe43313 Translated using Weblate (Azerbaijani) 
Currently translated at 87.5% (7 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/az/
 2026-04-07 20:47:37 +02:00
objecttothis 6f1c39d99e Translated using Weblate (Arabic (ar_LB)) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/ar_LB/
 2026-04-07 20:47:37 +02:00
objecttothis 45902caa67 Translated using Weblate (Arabic (Egypt)) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/ar_EG/
 2026-04-07 20:47:37 +02:00
objecttothis 1fe865a100 Translated using Weblate (English) 
Currently translated at 100.0% (8 of 8 strings)

Translation: opensourcepos/bootstrap_tables
Translate-URL: https://translate.opensourcepos.org/projects/opensourcepos/bootstrap_tables/en/
 2026-04-07 20:47:37 +02:00
Ollama 90da63cb13 fix(security): prevent SQL injection in tax controller sort columns 
Add sanitizeSortColumn() validation to prevent SQL injection in the
sort parameter of search() methods in tax-related controllers.

Vulnerable controllers:
- Taxes.php: sort column was passed directly to model
- Tax_categories.php: sort column was passed directly to model
- Tax_codes.php: sort column was passed directly to model
- Tax_jurisdictions.php: sort column was passed directly to model

Fix: Use sanitizeSortColumn() to validate sort column against
allowed headers, defaulting to primary key if invalid.
 2026-04-06 18:37:07 +00:00
Ollama 8da4aff262 fix(security): prevent command injection in sendmail path configuration 
Add validation for the mailpath POST parameter to prevent command injection
attacks. The path is validated to only allow alphanumeric characters,
underscores, dashes, forward slashes, and dots.

- Required mailpath when protocol is "sendmail"
- Validates format for all non-empty mailpath values
- Blocks common injection vectors: ; | & ` $() spaces newlines
- Added mailpath_invalid translation to all 43 language files
- Simplified validation logic to avoid redundant conditions

Files changed:
- app/Controllers/Config.php: Add regex validation with protocol check
- app/Language/*/Config.php: Add mailpath_invalid error message (43 languages)
- tests/Controllers/ConfigTest.php: Unit tests for validation
 2026-04-06 18:37:07 +00:00
Ollama 0e9f4a998d fix(ci): replace / with _ in branch names for Docker tags 
Docker image tags cannot contain / characters. Replace them with _
to ensure valid tag names when building from feature branches.
 2026-04-06 10:51:56 +02:00
Nozomu Sasaki (Paul)Claude Sonnet 4.6Paulobjecttothis
 		85c7ce2da4 Fix negative price/quantity/discount validation (GHSA-wv3j-pp8r-7q43) (#4450) 
* Fix business logic vulnerability allowing negative sale totals (GHSA-wv3j-pp8r-7q43)

Add server-side validation in postEditItem() to reject negative prices,
quantities, and discounts, as well as percentage discounts exceeding 100%
and fixed discounts exceeding the item total. Also block sale completion
with negative totals in non-return mode to prevent fraud/theft.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Fix: exempt return mode from negative quantity validation

Return mode legitimately stores items with negative quantities.
The quantity validation now skips the non-negative check in return mode,
consistent with the existing return mode exemption in postComplete().
Also use abs() for fixed discount comparison to handle return quantities.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Refactor: use $rules + validate() pattern per review feedback

Address review comments from jekkos on PR #4450:

1. Use CI4 $rules variable with custom non_negative_decimal validation
   rule instead of manual if-checks for price/discount validation.

2. Add validation error strings to all 44 non-English language files
   (English fallback values used until translations are contributed).

3. Use validate() method with $messages array for localized error
   display, maintaining the existing controller pattern.

Additional improvements:
- Add non_negative_decimal rule to OSPOSRules.php (leverages
  parse_decimals() for locale-aware decimal parsing)
- Preserve manual checks for business logic (return mode quantity
  exemption, discount bounds via bccomp)
- Fix PHP 8.1+ compatibility: avoid passing method return to reset()
- Explicit empty discount handling for bc-math safety

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Fix: rename to nonNegativeDecimal (PSR), clear non-English translation strings

- Rename validation rule method non_negative_decimal → nonNegativeDecimal in
  OSPOSRules.php and all $rules/$messages references in Sales.php (PSR naming
  per @objecttothis review)
- Replace English fallback text with "" in 43 non-English language files so
  CI4 falls back to the base language string; weblate will handle translations
  (per @jekkos and @objecttothis agreement)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Paul <morimori-dev@github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: objecttothis <17935339+objecttothis@users.noreply.github.com>
 2026-04-03 14:49:42 +04:00