Commit Graph

  • 0c3574423c refactor: optimize Docker image size Ollama 2026-03-24 08:00:56 +00:00
  • 39864c4e86 Introduce RewardOperation enum for type-safe reward operations fix/pr-4361-camelcase Ollama 2026-03-22 20:03:01 +00:00
  • 423c06142c Prevent negative reward points and address CodeRabbit review comments Ollama 2026-03-22 19:56:04 +00:00
  • 896ed87797 fix: Address CodeRabbit AI review comments Ollama 2026-03-22 19:47:09 +00:00
  • eb264ad76d refactor: Address review comments - PSR-12 naming and plugin cleanup Ollama 2026-03-22 19:40:36 +00:00
  • 10a64e7af9 refactor: Remove redundant isEnabled() checks from callback methods Ollama 2026-03-20 19:48:27 +00:00
  • 6fea9c3abd refactor: remove build-database gulp task (#4447) Ollama 2026-03-20 19:36:11 +00:00
  • 0547d3ba60 refactor: remove tables.sql and constraints.sql (#4447) Ollama 2026-03-20 19:33:13 +00:00
  • 6e99f05d63 refactor: Update MailchimpPlugin as proper example plugin Ollama 2026-03-20 18:32:42 +00:00
  • a18dde4bbe feat: migrate CI from Travis to GitHub Actions with enhancements Ollama 2026-03-19 21:34:12 +00:00
  • c430c7afb5 refactor: Move mailchimp language strings to self-contained plugin directory Ollama 2026-03-19 18:24:48 +00:00
  • 519347f4f5 refactor: Fix PSR-12 and documentation issues Ollama 2026-03-19 18:20:05 +00:00
  • 62d84411b2 docs: Fix documentation consistency issues Ollama 2026-03-18 22:06:09 +00:00
  • e4b92b58c3 Bump jspdf from 4.2.0 to 4.2.1 dependabot[bot] 2026-03-17 18:47:19 +00:00
  • d71b69f6d8 Fix review issues: CSS syntax, accessibility, colspan values, and avatar toggle state persistence fix/pr-4305-bugs Ollama 2026-03-17 15:42:17 +00:00
  • dc1e448bc3 Fix review comments: remove redundant loop and add XSS escaping Ollama 2026-03-17 07:46:51 +00:00
  • 24b2825b31 Fix: Restrict employee selection in expenses and receivings forms Ollama 2026-03-16 18:24:40 +00:00
  • a240c933fd Add Reward_lib import to Sale model Ollama 2026-03-17 15:01:35 +00:00
  • 66b6c99384 Extract reward logic to Reward_lib library and add unit tests Ollama 2026-03-17 15:00:57 +00:00
  • 6bd4bb545d docs: Add internationalization section showing self-contained plugin language files Ollama 2026-03-17 14:36:13 +00:00
  • 38d672592b Add seed data to tests for proper integration testing Ollama 2026-03-16 18:15:09 +00:00
  • 6f7e06e986 Rewrite tests to use database integration testing Ollama 2026-03-14 16:35:49 +00:00
  • fda40d9340 Fix rounding consistency and update tests per review feedback Ollama 2026-03-14 16:26:36 +00:00
  • b49186ec7c Add unit tests for Taxes Summary Report calculations Ollama 2026-03-14 16:00:10 +00:00
  • 8b56f61b8a Fix Taxes Summary Report totals not matching row values Ollama 2026-03-14 15:57:52 +00:00
  • a1c062ab13 PSR-12: Refactor snake_case variables to camelCase and extract helper method Ollama 2026-03-16 18:26:10 +00:00
  • 9820beb0e1 Fix: Add Debit Card filter to Daily Sales and Takings Ollama 2026-03-16 06:30:07 +00:00
  • e01dad728f Add AGENTS.md with coding guidelines for AI agents Ollama 2026-03-16 18:02:50 +00:00
  • 234f930079 Fix strftime directives handling and tighten test assertions Ollama 2026-03-14 12:14:59 +00:00
  • 3001dc0e17 Fix: Pass parameter to generate() and add composite format tests Ollama 2026-03-13 21:35:31 +00:00
  • 3ba207e8b9 Use CIUnitTestCase for consistency with other tests Ollama 2026-03-10 21:48:03 +00:00
  • d684c49ebd Fix Token_lib::render() for PHP 8.4 compatibility Ollama 2026-03-08 21:46:32 +00:00
  • 003df2bd7c PSR-12: Convert snake_case to camelCase for reward methods Ollama 2026-03-14 15:42:51 +00:00
  • 071e641f95 Fix stored XSS via stock location name Ollama 2026-03-14 15:31:07 +00:00
  • 48af67bd00 Fix stored XSS in gcaptcha_site_key on login page Ollama 2026-03-14 15:30:52 +00:00
  • 7cb1d95da7 Fix: Host Header Injection vulnerability (GHSA-jchf-7hr6-h4f3) Ollama 2026-03-13 18:44:09 +00:00
  • bafe3ddf1b Fix stored XSS vulnerability in Attribute Definitions (GHSA-rvfg-ww4r-rwqf) (#4429) jekkos 2026-03-14 15:33:58 +00:00
  • c482e75304 Fix DECIMAL attribute not respecting locale format (#4422) jekkos 2026-03-13 21:23:52 +00:00
  • afc2f82dc6 Fix PHPUnit environment variables not being set (#4434) jekkos 2026-03-13 18:54:29 +00:00
  • eec567ee15 Address CodeRabbit review comments Ollama 2026-03-13 18:44:44 +00:00
  • ce411707b4 Fix SQL injection in suggestions column configuration (#4421) jekkos 2026-03-13 18:13:54 +00:00
  • 37c6e22fc4 Update SECURITY.md with published security advisories (#4431) jekkos 2026-03-13 17:53:32 +00:00
  • 3c7ece5c33 Fix permission bypass in Sales.getManage() access control (#4428) jekkos 2026-03-13 17:52:07 +00:00
  • 02fccaf43f Fix XSS vulnerability in tax invoice view (#4432) jekkos 2026-03-13 16:09:04 +00:00
  • ee4d44ed39 Fix IDOR vulnerability in password change (GHSA-mcc2-8rp2-q6ch) (#4427) jekkos 2026-03-13 11:13:21 +00:00
  • fa3f257e7b Fix PHPUnit test configuration for database connectivity (#4430) jekkos 2026-03-13 09:38:37 +00:00
  • 46185a6d44 Address review feedback: use ternary, camelCase, remove test file Ollama 2026-03-12 19:44:38 +00:00
  • 66f7d70749 feat(plugins): add view hooks for injecting plugin content into core views Ollama 2026-03-12 10:13:03 +00:00
  • 431a9951e9 Fix filter persistence javascript issues (#4400) jekkos 2026-03-11 22:35:12 +01:00
  • f7e8d6e427 Add filter persistence for table views via URL query string (#4400) jekkos 2026-03-11 20:11:00 +01:00
  • e7c610acd0 Refactor reward variables to camelCase Furzi 2026-01-16 21:18:59 +08:00
  • cff8762d07 Fix customer reward points not updating correctly when editing or deleting sales Furzi 2026-01-03 10:30:02 +08:00
  • 85889b6e65 Bump jspdf from 4.1.0 to 4.2.0 (#4383) dependabot[bot] 2026-03-11 16:36:53 +04:00
  • 6818f02ef9 Update SECURITY.md with published security advisories Ollama 2026-03-10 19:30:33 +00:00
  • 436696b11b Add workflow to auto-update issue templates with releases Ollama 2026-03-09 21:03:55 +00:00
  • bd8b4fa6c1 feat(plugins): Support self-contained plugin directories Ollama 2026-03-06 12:55:44 +00:00
  • a9669ddf19 feat(plugins): Implement modular plugin system with self-registering events Ollama 2026-03-06 12:51:15 +00:00
  • 9a2b308647 Sync language files (#3468) Ollama 2026-03-08 21:54:32 +00:00
  • 50fd9d5da0 Fix indentation in serveImage and getPicThumb methods Ollama 2026-03-08 22:03:34 +00:00
  • 1f55d96580 Fix mass assignment vulnerability in bulk edit (GHSA-49mq-h2g4-grr9) Ollama 2026-03-07 20:09:12 +00:00
  • b2fadea44a Fix broken SQL injection fix - use havingLike() instead of having() with named params Ollama 2026-03-08 20:58:02 +00:00
  • 0fdb3ba37b Fix payment type becoming null when editing sales Ollama 2026-03-08 21:28:50 +00:00
  • d7b2264ac1 Fix: Preserve CHECKBOX attribute state when adding attributes (#4385) jekkos 2026-03-05 12:28:13 +00:00
  • 302a76b84a Merge branch 'master' into feature/integration-tests feature/integration-tests objecttothis 2026-03-08 13:15:43 -07:00
  • a229bf6031 Fix stored XSS vulnerabilities in employee permissions and customer data Ollama 2026-03-07 18:19:14 +00:00
  • 977fa5647b Fix stored XSS vulnerability in item descriptions Ollama 2026-03-07 18:31:25 +00:00
  • 2725c6e872 Fix integration tests: run playwright on failure, fix test path and syntax error Ollama 2026-03-07 18:27:08 +00:00
  • 52b0a83190 Fix SQL injection in custom attribute search Ollama 2026-03-07 13:24:37 +00:00
  • 7cd2d3e61f Fix CI: Remove --wait flag from docker compose up Ollama 2026-03-06 21:39:50 +00:00
  • f25a0f5b09 Refactor: Move ADMIN_MODULES to constants, rename methods to camelCase jekkos 2026-03-06 10:01:28 +00:00
  • f0f288797a Add migration to fix existing image filenames with spaces (#4372) jekkos 2026-03-05 12:42:38 +00:00
  • 63083a0946 Fix: Sanitize image filenames to prevent thumbnail display issues (#4372) jekkos 2026-03-05 12:42:10 +00:00
  • 3a33098776 Fix: Handle image filenames with spaces in thumbnails jekkos 2026-03-05 12:37:40 +00:00
  • ca6a1b35af Add row-level authorization to password change endpoints (#4401) jekkos 2026-03-06 17:08:36 +01:00
  • 418580a52d Fix second-order SQL injection in currency_symbol config (#4390) jekkos 2026-03-06 17:01:38 +01:00
  • 12146275f4 fix: Fix migration foreign key constraint and remove seeder feature/rest-api-implementation Ollama 2026-03-06 15:05:59 +00:00
  • e45af91e2e feat: Add REST API implementation with API key authentication Ollama 2026-03-06 14:35:27 +00:00
  • 31d25e06dc fix(security): whitelist and validate invoice template types (#4393) jekkos 2026-03-06 13:18:47 +01:00
  • b1819b3b36 dd validation for invalid stock locations in CSV import (#4399) jekkos 2026-03-06 13:17:52 +01:00
  • 6705420373 Fix incorrect argument types in migration round_number() methods (#4403) jekkos 2026-03-06 13:07:24 +01:00
  • 09191b9af7 feat: Add OpenAPI 3.1 specification for REST API feature/api-openapi-spec jekkos 2026-03-06 10:27:11 +00:00
  • 86e150ad96 Update INSTALL.md with opensourcepos.org short URL feature/ubuntu-install-script jekkos 2026-03-06 10:21:22 +00:00
  • 2c0ae0b035 Add admin-only restriction for giftcard deletion fix/bola-remaining-controllers jekkos 2026-03-06 08:07:39 +00:00
  • d6b767c80a Bump dompurify from 3.3.1 to 3.3.2 (#4402) dependabot[bot] 2026-03-05 21:54:49 +01:00
  • 19eb43270a Fix broken object-level authorization in Employees controller (CVE-worthy) (#4391) jekkos 2026-03-05 19:46:39 +01:00
  • 8f4055c711 Add one-line Ubuntu installation script jekkos 2026-03-05 15:11:06 +00:00
  • 3c25fd77e2 Add validation for invalid stock locations in CSV import jekkos 2026-03-05 15:06:28 +00:00
  • df4549bb0b Fix Docker image upload by replacing slashes in TAG jekkos 2026-03-05 14:46:38 +00:00
  • 3f7ea18f18 Add unit tests for CSV import functionality jekkos 2026-03-05 12:57:37 +00:00
  • 22e3548fea Fix issues in PR #4305: Add missing toggle buttons, fix colspan bug, cleanup jekkos 2026-03-05 12:50:09 +00:00
  • bdc965be23 Fix: Refresh session language for employee after update. (#4245) jekkos 2026-03-04 22:43:52 +01:00
  • 3c5f4c1465 Add integration test harness with Playwright E2E tests jekkos 2026-03-04 21:37:07 +00:00
  • 5c8905aa1b Language Array Key Typo Fix (#4371) Lucas Lyimo 2026-03-05 00:06:17 +03:00
  • 36bf130bdd Add comprehensive unit tests for PR #4384 jekkos 2026-03-04 20:48:10 +00:00
  • 690f43578d Use Content-Type application/json for AJAX responses (#4357) jekkos 2026-03-04 21:42:35 +01:00
  • 0858a1c23c Fix permission bypass in Reports submodule access control (#4389) jekkos 2026-03-04 21:18:42 +01:00
  • 3c217bbddd Fix XSS vulnerabilities in invoice_email.php view jekkos 2026-03-04 17:53:18 +00:00
  • 87a0606141 Fix XSS vulnerability in register (#3965) jekkos 2026-03-03 22:40:50 +01:00
  • b6a90f7880 Fix XSS vulnerability in register (#3965) jekkos 2026-03-03 22:37:08 +01:00
  • b93359bcaf Fix XSS vulnerability in attributes (#3965) jekkos 2026-03-03 22:28:32 +01:00