jekkos 2c0ae0b035 Add admin-only restriction for giftcard deletion ...

Giftcards represent monetary value, so restrict deletion to admin users
only to prevent potential fraud by non-admin employees.

Related to BOLA vulnerability fix in Employees controller.

2026-03-06 08:07:39 +00:00

..

Config

Use Content-Type application/json for AJAX responses (#4357)

2026-03-04 21:42:35 +01:00

Controllers

Add admin-only restriction for giftcard deletion

2026-03-06 08:07:39 +00:00

Database

Use Content-Type application/json for AJAX responses (#4357)

2026-03-04 21:42:35 +01:00

Events

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

Filters

Upgrade to CodeIgniter 4.1.3

2024-06-15 17:19:15 +02:00

Helpers

Language Array Key Typo Fix (#4371)

2026-03-04 22:06:17 +01:00

Language

Add admin-only restriction for giftcard deletion

2026-03-06 08:07:39 +00:00

Libraries

Use Content-Type application/json for AJAX responses (#4357)

2026-03-04 21:42:35 +01:00

Models

Fix broken object-level authorization in Employees controller (CVE-worthy) (#4391)

2026-03-05 19:46:39 +01:00

ThirdParty

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

Views

Use Content-Type application/json for AJAX responses (#4357)

2026-03-04 21:42:35 +01:00

.htaccess

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

Common.php

Upgrade CI to 4.4.3

2024-06-15 17:19:15 +02:00

index.html

Corrected link in README.md

2024-06-15 17:19:15 +02:00