Commit Graph

  • d63d31700d Ensure payload data is escaped to prevent XSS (#4664) objecttothis 2026-08-28 10:08:31 +04:00
  • d872fa5b05 Merge branch 'master' into feature-optimize-items-view-queries objecttothis 2026-08-27 14:05:08 +04:00
  • 2589d7d812 Merge branch 'master' into feature-stock-location-dropdown-order objecttothis 2026-08-27 14:04:42 +04:00
  • a35372dbe8 Merge branch 'master' into feature-complete-russian-and-azerbaijani-translations objecttothis 2026-08-27 13:21:25 +04:00
  • 84bddcdd88 Feature admin account safeguards (#4657) objecttothis 2026-08-27 11:29:32 +04:00
  • 462e2150b0 Merge branch 'master' into feature-stock-location-dropdown-order objecttothis 2026-08-25 18:33:54 +04:00
  • 8579bc165d Merge branch 'master' into feature-optimize-items-view-queries objecttothis 2026-08-25 18:33:48 +04:00
  • 414e9dc909 fix(i18n): refine Azerbaijani translation for "no_reports_to_display" in Reports.php objecttothis 2026-08-25 18:28:12 +04:00
  • aebe1185f2 fix(i18n): refine phrasing for "change_all_to_serialized" and "change_all_to_unserialized" in Russian translations objecttothis 2026-08-25 18:26:31 +04:00
  • c3cc3eaf71 Merge branch 'master' into feature-complete-russian-and-azerbaijani-translations objecttothis 2026-08-25 18:23:21 +04:00
  • 944697e68e fix(i18n): remove period from "definition_successful_adding" message in English objecttothis 2026-08-25 18:22:28 +04:00
  • 904c136f68 fix(i18n): correct phrasing for "print_delay_autoreturn" in English and Russian translations objecttothis 2026-08-25 17:39:00 +04:00
  • 7f40ce0d2c fix(i18n): improve phrasing for required field messages in Russian translations objecttothis 2026-08-25 17:35:14 +04:00
  • d45cbc3767 fix(i18n): update Azerbaijani and English translations for "cost" and "cost_price" keys in Reports.php objecttothis 2026-08-25 17:24:30 +04:00
  • 101a093ba1 fix(i18n): update Azerbaijani translation for "powered_by" key in Common.php objecttothis 2026-08-25 16:58:01 +04:00
  • 8b0f8533de fix(email): update method call to camelCase for PSR-12 compliance (#4659) objecttothis 2026-08-24 21:46:12 +04:00
  • 64ca4ef020 fix(i18n): correct Russian translations for attribute-related messages objecttothis 2026-08-24 17:00:10 +04:00
  • 9d59f8cc7e fix(i18n): correct Azerbaijani and English translations for attribute-related messages objecttothis 2026-08-24 16:56:35 +04:00
  • 7c8e392021 fix(i18n): address misplaced keys and duplicate entries in Azerbaijani and Russian language files objecttothis 2026-08-24 16:49:20 +04:00
  • 2fd86291ba fix(i18n): standardize Russian language file formatting and improve translations objecttothis 2026-08-24 16:31:11 +04:00
  • 7086b057a6 fix(i18n): align Azerbaijani language files with EN reference, format keys/values consistently objecttothis 2026-08-24 16:30:44 +04:00
  • c701d21886 fix(sales): gate per-record endpoints behind reports_sales grant (#4627) objecttothis 2026-08-23 17:40:06 +04:00
  • 223f4c6345 Merge branch 'master' into feature-stock-location-dropdown-order objecttothis 2026-08-21 21:01:09 +04:00
  • 9ee530e454 Hotfix: Fix CI3 database migration caused by regression (#4649) objecttothis 2026-08-21 21:00:48 +04:00
  • e336fc245a refactor(helpers): add optional parameter to itemSortColumns for dynamic attribute handling objecttothis 2026-08-21 17:19:16 +04:00
  • 926982b116 refactor(controllers): simplify column key extraction in Secure_Controller objecttothis 2026-08-21 17:16:08 +04:00
  • f299688540 fix(tests): ensure stock location creation in item quantity tests objecttothis 2026-08-21 16:40:12 +04:00
  • 13df4404f8 fix(localization): unify string quotations across language files objecttothis 2026-08-21 16:38:51 +04:00
  • 5fb0e947d1 fix(localization): unify string quotations across language files objecttothis 2026-08-21 16:18:41 +04:00
  • 91f8d89bc0 refactor(items): standardize function and variable names for consistency objecttothis 2026-08-21 15:49:43 +04:00
  • 1932251a73 fix(items): enhance named attribute search with improved type handling objecttothis 2026-08-21 15:41:47 +04:00
  • b359992350 fix(items): refine attribute query logic and improve column ordering objecttothis 2026-08-21 14:45:14 +04:00
  • 80f5d4cd57 refactor(items): streamline column sorting and attribute search logic objecttothis 2026-08-21 14:27:21 +04:00
  • 3c2d540cc6 Merge remote-tracking branch 'OpensourcePOS/master' into feature-optimize-items-view-queries objecttothis 2026-08-21 14:14:24 +04:00
  • 55fd835e70 fix(items): implement named attribute search and optimize attribute handling objecttothis 2026-08-21 14:07:25 +04:00
  • 953147a79a Implement Phase 3: Multi-attribute search AND logic and Phase 4: Sort by attribute columns Ollama 2026-03-16 18:27:56 +00:00
  • b3a22c8c19 style: Apply PSR-12 formatting Ollama 2026-03-16 18:37:04 +00:00
  • 6cd50baf01 Refactor: Use existing sanitizeSortColumn method with item_sort_columns helper Ollama 2026-03-16 18:34:23 +00:00
  • 37b359d146 Refactor: Add ALLOWED_SORT_COLUMNS constant and reuse in sanitization Ollama 2026-03-16 18:30:43 +00:00
  • b829d796bc feat: Add show_in_search language strings to all languages Ollama 2026-03-30 08:39:31 +00:00
  • 1654a4b65a Add SHOW_IN_SEARCH flag to separate attribute search from visibility Ollama 2026-03-16 18:21:14 +00:00
  • 50d07108a2 fix(tests): update quantity aggregation test for multi-location support objecttothis 2026-08-21 12:57:15 +04:00
  • 8f2f7ee528 fix(items): improve date range filtering logic in Item model objecttothis 2026-08-21 12:53:04 +04:00
  • 9138127a67 fix(items): optimize quantity sum handling and add test to prevent over-counting objecttothis 2026-08-21 12:49:51 +04:00
  • c25c372175 fix(items): rename deleted column alias to supplier_deleted in Item model query objecttothis 2026-08-21 12:32:45 +04:00
  • d01ea38b69 fix(items): add support for sorting by quantity across all locations objecttothis 2026-08-21 12:22:23 +04:00
  • 09115461b1 fix(items): enhance filtering logic and sanitize definition IDs objecttothis 2026-08-21 12:03:39 +04:00
  • 51617d14ce Merge branch 'master' into feature-stock-location-dropdown-order objecttothis 2026-08-21 11:29:37 +04:00
  • d081346528 Codeigniter changes between 4.7.2 and 4.7.4 (#4650) objecttothis 2026-08-21 11:28:19 +04:00
  • 058ec2e9d4 refactor(items): optimize search method by splitting query into phases for better performance and readability objecttothis 2026-08-20 21:31:40 +04:00
  • 410c6649e0 refactor(items): streamline tax computation and add tests for getItemDataRow objecttothis 2026-08-20 21:28:56 +04:00
  • b676369bd4 Merge remote-tracking branch 'OpensourcePOS/master' into feature-stock-location-dropdown-order objecttothis 2026-08-20 11:51:55 +04:00
  • 1cbdae2b89 Merge remote-tracking branch 'OpensourcePOS/master' into plugin-system-fresh objecttothis 2026-08-20 11:27:14 +04:00
  • cc93c31355 fix(items): add explicit sentinel value for clearing supplier in bulk edit (#4617) objecttothis 2026-08-20 11:24:50 +04:00
  • a9526a6334 Merge remote-tracking branch 'OpensourcePOS/master' into plugin-system-fresh objecttothis 2026-08-20 11:18:18 +04:00
  • 72f170f8be Merge branch 'master' into feature-stock-location-dropdown-order objecttothis 2026-08-20 10:16:16 +04:00
  • 61bb1a2c2a hotfix(auth): hash throttler keys to improve security (#4646) objecttothis 2026-08-20 02:27:13 +04:00
  • 29a9b1a7e7 Bugfix: Resolve Race Condition in Rewards and Gift Card Spending (#4640) objecttothis 2026-08-20 02:24:23 +04:00
  • 028179e6de fix(models): compact sort order after deletion to prevent gaps objecttothis 2026-08-19 18:02:02 +04:00
  • b09b51439f fix(controllers): abort stock location processing on save failure objecttothis 2026-08-19 17:55:27 +04:00
  • fc9f9afc29 fix(controllers): validate and sanitize submitted stock locations before saving objecttothis 2026-08-19 17:49:09 +04:00
  • ddf8d5df96 fix(models): use explicit SQL query to ensure atomic sort_order calculation objecttothis 2026-08-19 17:45:39 +04:00
  • a7f1994404 fix(view): conditionally reload stock locations on success response objecttothis 2026-08-19 17:37:52 +04:00
  • 39124e8132 fix(controllers, views): handle new stock locations in sort order and default selection objecttothis 2026-08-19 17:36:03 +04:00
  • 2115fda4e5 fix(models): validate existence of stock location before setting as default objecttothis 2026-08-19 17:17:08 +04:00
  • d103790568 fix(libraries): update get_stock_destination() to allow nullable return type objecttothis 2026-08-19 17:12:02 +04:00
  • 593a2f0d7d fix(view): add aria-label for default stock location and update element IDs objecttothis 2026-08-19 17:10:08 +04:00
  • a6076c9068 fix(view): use stock location-specific quantity or fallback to default objecttothis 2026-08-19 17:06:09 +04:00
  • f18524af57 fix(view): handle undefined stock location with fallback to default objecttothis 2026-08-19 17:04:25 +04:00
  • f315163a18 fix(view): disable default checkbox for new stock locations and improve row selection logic objecttothis 2026-08-19 17:01:03 +04:00
  • 4f25bb540f fix(libraries): validate default location ID before assigning it in session objecttothis 2026-08-19 16:57:41 +04:00
  • 99b42f0800 fix(models): ensure dense sort_order range and clear values for deleted locations objecttothis 2026-08-19 16:50:24 +04:00
  • fa9bc0bbf3 fix(controllers): validate default stock location ID before setting it objecttothis 2026-08-19 16:06:37 +04:00
  • b14492c850 fix(view): escape dynamic stock location IDs to prevent potential XSS objecttothis 2026-08-19 15:50:53 +04:00
  • bdfcf07fe1 fix(models): handle empty location IDs in saveSortOrder method objecttothis 2026-08-19 15:46:55 +04:00
  • bd66506ce4 fix(security): escape location ID to prevent potential XSS in stock locations view objecttothis 2026-08-19 15:45:15 +04:00
  • 94adc90ee0 fix(libraries): update methods to return nullable int and handle default location assignment cautiously objecttothis 2026-08-19 15:20:45 +04:00
  • a8219942e2 Merge remote-tracking branch 'OpensourcePOS/master' into feature-stock-location-dropdown-order Travis Garrison 2026-08-19 10:39:21 +04:00
  • a2b91493c7 Feature: CodeIgniter Throttler (#4619) objecttothis 2026-08-19 00:25:22 +04:00
  • d4c295d1d8 Add unit tests for Stock_location model, covering default location handling, sort order management, and deletion behavior. Travis Garrison 2026-08-18 21:08:59 +04:00
  • 11836c9d3a Refactor Stock_location model to adopt camelCase method naming, introduce is_default and sort_order support, add migration, UI updates, default location handling, and item synchronization. Travis Garrison 2026-08-18 20:09:52 +04:00
  • 8bd2a51cb5 fix(items): validate item_number and skip receiving quantity default for temp items (#4621) objecttothis 2026-08-18 02:51:42 +04:00
  • 0e8fc0963a Reject item CSV imports whose header row is missing required columns (#4597) Sai Asish Yandobjecttothis 2026-08-14 03:05:43 -07:00
  • f37a333186 Bootstrap 5 WIP - work in progress build of conversion from bootstrap 3 to 5 bootstrap-5 BudsieBuds 2026-08-11 22:34:11 +02:00
  • 95670eb39e Bye Glyphicons - replaced glyphicons with bootstrap-icons BudsieBuds 2026-08-11 22:07:42 +02:00
  • 65b99fea97 chore(deps): bump dompurify from 3.4.12 to 3.4.13 (#4639) dependabot[bot] 2026-08-10 21:42:43 +04:00
  • 29f8f16459 chore(deps): bump codeigniter4/framework from 4.7.2 to 4.7.4 (#4638) dependabot[bot] 2026-08-09 19:58:14 +02:00
  • 5c9b1b81e6 fix(xss): remove redundant escaping that double-encoded item attribute values (#4628) objecttothisandTravis Garrison 2026-08-09 11:37:38 +04:00
  • 08b0951a84 fix: use db_connect() for item save transactions (#4636) richardmilles 2026-08-09 00:10:53 +02:00
  • f5ba1709eb fix(security): sanitize filenames and escape logo path in config (#4630) objecttothisandTravis Garrison 2026-08-07 20:30:02 +04:00
  • aa96ad0284 refactor: apply PSR-12 naming to Attribute definition methods (#4624) Rayan Abdul Caderandobjecttothis 2026-08-07 12:13:05 +03:00
  • a5d70c07bb fix(auth): validate gcaptcha before password to prevent bypass (#4618) objecttothisandTravis Garrison 2026-08-07 02:27:33 +04:00
  • 35f056ce69 refactor(migrations): rename execute_script to executeScript across all migrations (#4611) objecttothisandTravis Garrison 2026-08-07 02:26:43 +04:00
  • 0808ffae0d fix(sales): escape quote number in email template to prevent XSS (#4625) objecttothisandTravis Garrison 2026-08-07 02:21:19 +04:00
  • 3bafa07e04 fix(sales): enforce server-side authorization for price changes (#4631) objecttothisandTravis Garrison 2026-08-07 02:20:01 +04:00
  • 2c69dc0c34 fix(config): validate theme param to prevent XSS via invalid theme (#4620) 2026-08-07 02:18:44 +04:00
  • d58caaf3fc Merge branch 'master' into fix/attribute-search-refactor fix/attribute-search-refactor objecttothis 2026-08-06 12:27:56 +04:00
  • 0a4c418690 fix: get_definition_by_name() returns single row instead of multi-dimensional array (#4452) (#4464) 2026-08-06 15:27:13 +07:00
  • 5e7873d4f7 Merge branch 'master' into feat-4488-enable-csp feat-4488-enable-csp objecttothis 2026-08-06 12:18:58 +04:00
  • 6e273a2fb1 refactor: Replace var with let/const in JavaScript files (#4503) 2026-08-06 10:15:45 +02:00