mirror of
https://github.com/opensourcepos/opensourcepos.git
synced 2026-04-17 21:41:43 -04:00
8da4aff262
Add validation for the mailpath POST parameter to prevent command injection attacks. The path is validated to only allow alphanumeric characters, underscores, dashes, forward slashes, and dots. - Required mailpath when protocol is "sendmail" - Validates format for all non-empty mailpath values - Blocks common injection vectors: ; | & ` $() spaces newlines - Added mailpath_invalid translation to all 43 language files - Simplified validation logic to avoid redundant conditions Files changed: - app/Controllers/Config.php: Add regex validation with protocol check - app/Language/*/Config.php: Add mailpath_invalid error message (43 languages) - tests/Controllers/ConfigTest.php: Unit tests for validation
333 lines
25 KiB
PHP
333 lines
25 KiB
PHP
<?php
|
|
|
|
return [
|
|
"address" => "Company Address",
|
|
"address_required" => "Company address is a required field.",
|
|
"all_set" => "All file permissions are set correctly!",
|
|
"allow_duplicate_barcodes" => "Allow Duplicate Barcodes",
|
|
"apostrophe" => "apostrophe",
|
|
"backup_button" => "Backup",
|
|
"backup_database" => "Backup Database",
|
|
"barcode" => "Barcode",
|
|
"barcode_company" => "Company Name",
|
|
"barcode_configuration" => "Barcode Configuration",
|
|
"barcode_content" => "Barcode Content",
|
|
"barcode_first_row" => "Row 1",
|
|
"barcode_font" => "Font",
|
|
"barcode_formats" => "Input Formats",
|
|
"barcode_generate_if_empty" => "Generate if empty.",
|
|
"barcode_height" => "Height (px)",
|
|
"barcode_id" => "Item Id/Name",
|
|
"barcode_info" => "Barcode Configuration Information",
|
|
"barcode_layout" => "Barcode Layout",
|
|
"barcode_name" => "Name",
|
|
"barcode_number" => "Barcode",
|
|
"barcode_number_in_row" => "Number in row",
|
|
"barcode_page_cellspacing" => "Display page cellspacing.",
|
|
"barcode_page_width" => "Display page width",
|
|
"barcode_price" => "Price",
|
|
"barcode_second_row" => "Row 2",
|
|
"barcode_third_row" => "Row 3",
|
|
"barcode_tooltip" => "Warning: This feature can cause duplicate items to be imported or created. Do not use if you do not want duplicate barcodes.",
|
|
"barcode_type" => "Barcode Type",
|
|
"barcode_width" => "Width (px)",
|
|
"bottom" => "Bottom",
|
|
"cash_button" => "",
|
|
"cash_button_1" => "",
|
|
"cash_button_2" => "",
|
|
"cash_button_3" => "",
|
|
"cash_button_4" => "",
|
|
"cash_button_5" => "",
|
|
"cash_button_6" => "",
|
|
"cash_decimals" => "Cash Decimals",
|
|
"cash_decimals_tooltip" => "If Cash Decimals and Currency Decimals are the same then no cash triggered rounding will take place, unless Cash Rounding is set to Half Five.",
|
|
"cash_rounding" => "Cash Rounding",
|
|
"category_dropdown" => "Show Category as a dropdown",
|
|
"center" => "Center",
|
|
"change_apperance_tooltip" => "",
|
|
"comma" => "comma",
|
|
"company" => "Company Name",
|
|
"company_avatar" => "",
|
|
"company_change_image" => "Change Image",
|
|
"company_logo" => "Company Logo",
|
|
"company_remove_image" => "Remove Image",
|
|
"company_required" => "Company name is a required field",
|
|
"company_select_image" => "Select Image",
|
|
"company_website_url" => "Company website is not a valid URL (http://...).",
|
|
"country_codes" => "Country Codes",
|
|
"country_codes_tooltip" => "Comma separated list of country codes for nominatim address lookup.",
|
|
"currency_code" => "Currency Code",
|
|
"currency_decimals" => "Currency Decimals",
|
|
"currency_symbol" => "Currency Symbol",
|
|
"current_employee_only" => "",
|
|
"customer_reward" => "Reward",
|
|
"customer_reward_duplicate" => "Reward must be unique.",
|
|
"customer_reward_enable" => "Enable Customer Rewards",
|
|
"customer_reward_invalid_chars" => "Reward can not contain '_'",
|
|
"customer_reward_required" => "Reward is a required field",
|
|
"customer_sales_tax_support" => "",
|
|
"date_or_time_format" => "Date and Time Filter",
|
|
"datetimeformat" => "Date and Time Format",
|
|
"decimal_point" => "Decimal Point",
|
|
"default_barcode_font_size_number" => "Default Barcode Font Size must be a number.",
|
|
"default_barcode_font_size_required" => "Default Barcode Font Size is a required field.",
|
|
"default_barcode_height_number" => "Default Barcode Height must be a number.",
|
|
"default_barcode_height_required" => "Default Barcode Height is a required field.",
|
|
"default_barcode_num_in_row_number" => "Default Barcode Number in Row must be a number.",
|
|
"default_barcode_num_in_row_required" => "Default Barcode Number in Row is a required field.",
|
|
"default_barcode_page_cellspacing_number" => "Default Barcode Page Cellspacing must be a number.",
|
|
"default_barcode_page_cellspacing_required" => "Default Barcode Page Cellspacing is a required field.",
|
|
"default_barcode_page_width_number" => "Default Barcode Page Width must be a number.",
|
|
"default_barcode_page_width_required" => "Default Barcode Page Width is a required field.",
|
|
"default_barcode_width_number" => "Default Barcode Width must be a number.",
|
|
"default_barcode_width_required" => "Default Barcode Width is a required field.",
|
|
"default_item_columns" => "Default Visible Item Columns",
|
|
"default_origin_tax_code" => "Default Origin Tax Code",
|
|
"default_receivings_discount" => "Default Receivings Discount",
|
|
"default_receivings_discount_number" => "Default Receivings Discount must be a number.",
|
|
"default_receivings_discount_required" => "Default Receivings Discount is a required field.",
|
|
"default_sales_discount" => "Default Sales Discount",
|
|
"default_sales_discount_number" => "Default Sales Discount must be a number.",
|
|
"default_sales_discount_required" => "Default Sales Discount is a required field.",
|
|
"default_tax_category" => "Default Tax Category",
|
|
"default_tax_code" => "Default Tax Code",
|
|
"default_tax_jurisdiction" => "Default Tax Jurisdiction",
|
|
"default_tax_name_number" => "Default Tax Name must be a string.",
|
|
"default_tax_name_required" => "Default Tax Name is a required field.",
|
|
"default_tax_rate" => "Default Tax Rate %",
|
|
"default_tax_rate_1" => "Tax 1 Rate",
|
|
"default_tax_rate_2" => "Tax 2 Rate",
|
|
"default_tax_rate_3" => "",
|
|
"default_tax_rate_number" => "Default Tax Rate must be a number.",
|
|
"default_tax_rate_required" => "Default Tax Rate is a required field.",
|
|
"derive_sale_quantity" => "Allow Derived Sale Quantity",
|
|
"derive_sale_quantity_tooltip" => "If checked then a new item type will be provided for items ordered by extended amount",
|
|
"dinner_table" => "Table",
|
|
"dinner_table_duplicate" => "Table must be unique.",
|
|
"dinner_table_enable" => "Enable Dinner Tables",
|
|
"dinner_table_invalid_chars" => "Table Name can not contain '_'.",
|
|
"dinner_table_required" => "Table is a required field.",
|
|
"dot" => "dot",
|
|
"email" => "Email",
|
|
"email_configuration" => "Email Configuration",
|
|
"email_mailpath" => "Path to Sendmail",
|
|
"email_protocol" => "Protocol",
|
|
"email_receipt_check_behaviour" => "Email Receipt checkbox",
|
|
"email_receipt_check_behaviour_always" => "Always checked",
|
|
"email_receipt_check_behaviour_last" => "Remember last selection",
|
|
"email_receipt_check_behaviour_never" => "Always unchecked",
|
|
"email_smtp_crypto" => "SMTP Encryption",
|
|
"email_smtp_host" => "SMTP Server",
|
|
"email_smtp_pass" => "SMTP Password",
|
|
"email_smtp_port" => "SMTP Port",
|
|
"email_smtp_timeout" => "SMTP Timeout (s)",
|
|
"email_smtp_user" => "SMTP Username",
|
|
"enable_avatar" => "",
|
|
"enable_avatar_tooltip" => "",
|
|
"enable_dropdown_tooltip" => "",
|
|
"enable_new_look" => "",
|
|
"enable_right_bar" => "",
|
|
"enable_right_bar_tooltip" => "",
|
|
"enforce_privacy" => "Enforce privacy",
|
|
"enforce_privacy_tooltip" => "Protect Customers privacy enforcing data scrambling in case of their data being deleted",
|
|
"fax" => "Fax",
|
|
"file_perm" => "There are problems with file permissions. Please fix and reload this page.",
|
|
"financial_year" => "Fiscal Year Start",
|
|
"financial_year_apr" => "1st of April",
|
|
"financial_year_aug" => "1st of August",
|
|
"financial_year_dec" => "1st of December",
|
|
"financial_year_feb" => "1st of February",
|
|
"financial_year_jan" => "1st of January",
|
|
"financial_year_jul" => "1st of July",
|
|
"financial_year_jun" => "1st of June",
|
|
"financial_year_mar" => "1st of March",
|
|
"financial_year_may" => "1st of May",
|
|
"financial_year_nov" => "1st of November",
|
|
"financial_year_oct" => "1st of October",
|
|
"financial_year_sep" => "1st of September",
|
|
"floating_labels" => "Floating Labels",
|
|
"gcaptcha_enable" => "Login Page reCAPTCHA",
|
|
"gcaptcha_secret_key" => "reCAPTCHA Secret Key",
|
|
"gcaptcha_secret_key_required" => "reCAPTCHA Secret Key is a required field",
|
|
"gcaptcha_site_key" => "reCAPTCHA Site Key",
|
|
"gcaptcha_site_key_required" => "reCAPTCHA Site Key is a required field",
|
|
"gcaptcha_tooltip" => "Protect the Login page with Google reCAPTCHA, click the icon for an API key pair.",
|
|
"general" => "General",
|
|
"general_configuration" => "General Configuration",
|
|
"giftcard_number" => "Gift Card Number",
|
|
"giftcard_random" => "Generate Random",
|
|
"giftcard_series" => "Generate in Series",
|
|
"image_allowed_file_types" => "Allowed file types",
|
|
"image_max_height_tooltip" => "Maximum allowed height of image uploads in pixels (px).",
|
|
"image_max_size_tooltip" => "Maximum allowed file size of image uploads in kilobytes (kb).",
|
|
"image_max_width_tooltip" => "Maximum allowed width of image uploads in pixels (px).",
|
|
"image_restrictions" => "Image Upload Restrictions",
|
|
"include_hsn" => "Include Support for HSN Codes",
|
|
"info" => "Information",
|
|
"info_configuration" => "Store Information",
|
|
"input_groups" => "Input Groups",
|
|
"integrations" => "Integrations",
|
|
"integrations_configuration" => "Third Party Integrations",
|
|
"invoice" => "Invoice",
|
|
"invoice_configuration" => "Invoice Print Settings",
|
|
"invoice_default_comments" => "Default Invoice Comments",
|
|
"invoice_email_message" => "Invoice Email Template",
|
|
"invoice_enable" => "Enable Invoicing",
|
|
"invoice_printer" => "Invoice Printer",
|
|
"invoice_type" => "Invoice Type",
|
|
"is_readable" => "is readable, but the permissions are incorrectly set. Please set it to 640 or 660 and refresh.",
|
|
"is_writable" => "is writable, but the permissions are incorrectly set. Please set it to 750 and refresh.",
|
|
"item_markup" => "",
|
|
"jsprintsetup_required" => "Warning: This functionality will only work if you have the FireFox jsPrintSetup addon installed. Save anyway?",
|
|
"language" => "Language",
|
|
"last_used_invoice_number" => "Last used Invoice Number",
|
|
"last_used_quote_number" => "Last used Quote Number",
|
|
"last_used_work_order_number" => "Last used W/O Number",
|
|
"left" => "Left",
|
|
"license" => "License",
|
|
"license_configuration" => "License Statement",
|
|
"line_sequence" => "Line Sequence",
|
|
"lines_per_page" => "Lines per Page",
|
|
"lines_per_page_number" => "Lines per Page must be a number.",
|
|
"lines_per_page_required" => "Lines per Page is a required field.",
|
|
"locale" => "Localization",
|
|
"locale_configuration" => "Localization Configuration",
|
|
"locale_info" => "Localization Configuration Information",
|
|
"location" => "Stock",
|
|
"location_configuration" => "Stock Locations",
|
|
"location_info" => "Location Configuration Information",
|
|
"login_form" => "Login Form Style",
|
|
"logout" => "Do you want to make a backup before logging out? Click [OK] to backup or [Cancel] to logout.",
|
|
"mailchimp" => "MailChimp",
|
|
"mailchimp_api_key" => "MailChimp API Key",
|
|
"mailchimp_configuration" => "MailChimp Configuration",
|
|
"mailchimp_key_successfully" => "API Key is valid.",
|
|
"mailchimp_key_unsuccessfully" => "API Key is invalid.",
|
|
"mailchimp_lists" => "MailChimp List(s)",
|
|
"mailchimp_tooltip" => "Click the icon for an API Key.",
|
|
"message" => "Message",
|
|
"message_configuration" => "Message Configuration",
|
|
"msg_msg" => "Saved Text Message",
|
|
"msg_msg_placeholder" => "If you wish to use a SMS template save your message here, otherwise leave the box blank.",
|
|
"msg_pwd" => "SMS-API Password",
|
|
"msg_pwd_required" => "SMS-API Password is a required field",
|
|
"msg_src" => "SMS-API Sender ID",
|
|
"msg_src_required" => "SMS-API Sender ID is a required field",
|
|
"msg_uid" => "SMS-API Username",
|
|
"msg_uid_required" => "SMS-API Username is a required field",
|
|
"multi_pack_enabled" => "Multiple Packages per Item",
|
|
"no_risk" => "No security/vulnerability risks.",
|
|
"none" => "none",
|
|
"notify_alignment" => "Notification Popup Position",
|
|
"number_format" => "Number Format",
|
|
"number_locale" => "Localization",
|
|
"number_locale_invalid" => "The entered locale is invalid. Check the link in the tooltip to find a valid locale.",
|
|
"number_locale_required" => "Number Locale is a required field.",
|
|
"number_locale_tooltip" => "Find a suitable locale through this link.",
|
|
"os_timezone" => "OSPOS Timezone:",
|
|
"ospos_info" => "OSPOS Installation Info",
|
|
"payment_options_order" => "Payment Options Order",
|
|
"perm_risk" => "Incorrect permissions leaves this software at risk.",
|
|
"phone" => "Company Phone",
|
|
"phone_required" => "Company Phone is a required field.",
|
|
"print_bottom_margin" => "Margin Bottom",
|
|
"print_bottom_margin_number" => "Margin Bottom must be a number.",
|
|
"print_bottom_margin_required" => "Margin Bottom is a required field.",
|
|
"print_delay_autoreturn" => "Autoreturn to Sale delay",
|
|
"print_delay_autoreturn_number" => "Autoreturn to Sale delay is a required field.",
|
|
"print_delay_autoreturn_required" => "Autoreturn to Sale delay must be a number.",
|
|
"print_footer" => "Print Browser Footer",
|
|
"print_header" => "Print Browser Header",
|
|
"print_left_margin" => "Margin Left",
|
|
"print_left_margin_number" => "Margin Left must be a number.",
|
|
"print_left_margin_required" => "Margin Left is a required field.",
|
|
"print_receipt_check_behaviour" => "Print Receipt checkbox",
|
|
"print_receipt_check_behaviour_always" => "Always checked",
|
|
"print_receipt_check_behaviour_last" => "Remember last selection",
|
|
"print_receipt_check_behaviour_never" => "Always unchecked",
|
|
"print_right_margin" => "Margin Right",
|
|
"print_right_margin_number" => "Margin Right must be a number.",
|
|
"print_right_margin_required" => "Margin Right is a required field.",
|
|
"print_silently" => "Show Print Dialog",
|
|
"print_top_margin" => "Margin Top",
|
|
"print_top_margin_number" => "Margin Top must be a number.",
|
|
"print_top_margin_required" => "Margin Top is a required field.",
|
|
"quantity_decimals" => "Quantity Decimals",
|
|
"quick_cash_enable" => "",
|
|
"quote_default_comments" => "Default Quote Comments",
|
|
"receipt" => "Receipt",
|
|
"receipt_category" => "",
|
|
"receipt_configuration" => "Receipt Print Settings",
|
|
"receipt_default" => "Default",
|
|
"receipt_font_size" => "Font Size",
|
|
"receipt_font_size_number" => "Font Size must be a number.",
|
|
"receipt_font_size_required" => "Font Size is a required field.",
|
|
"receipt_info" => "Receipt Configuration Information",
|
|
"receipt_printer" => "Ticket Printer",
|
|
"receipt_short" => "Short",
|
|
"receipt_show_company_name" => "Show Company Name",
|
|
"receipt_show_description" => "Show Description",
|
|
"receipt_show_serialnumber" => "Show Serial Number",
|
|
"receipt_show_tax_ind" => "Show Tax Indicator",
|
|
"receipt_show_taxes" => "Show Taxes",
|
|
"receipt_show_total_discount" => "Show Total Discount",
|
|
"receipt_template" => "Receipt Template",
|
|
"receiving_calculate_average_price" => "Calc avg. Price (Receiving)",
|
|
"recv_invoice_format" => "Receivings Invoice Format",
|
|
"register_mode_default" => "Default Register Mode",
|
|
"report_an_issue" => "Report an issue",
|
|
"return_policy_required" => "Return policy is a required field.",
|
|
"reward" => "Reward",
|
|
"reward_configuration" => "Reward Configuration",
|
|
"right" => "Right",
|
|
"sales_invoice_format" => "Sales Invoice Format",
|
|
"sales_quote_format" => "Sales Quote Format",
|
|
"mailpath_invalid" => "Invalid sendmail path. Only letters, numbers, dashes, underscores, slashes and dots are allowed.",
|
|
"saved_successfully" => "Configuration save successful.",
|
|
"saved_unsuccessfully" => "Configuration save failed.",
|
|
"security_issue" => "Security Vulnerability Warning",
|
|
"server_notice" => "Please use the below info for issue reporting.",
|
|
"service_charge" => "",
|
|
"show_due_enable" => "",
|
|
"show_office_group" => "Show office icon",
|
|
"statistics" => "Send Statistics",
|
|
"statistics_tooltip" => "Send statistics for development and feature improvement purposes.",
|
|
"stock_location" => "Stock location",
|
|
"stock_location_duplicate" => "Stock Location must be unique.",
|
|
"stock_location_invalid_chars" => "Stock Location can not contain '_'.",
|
|
"stock_location_required" => "Stock location is a required field.",
|
|
"suggestions_fifth_column" => "",
|
|
"suggestions_first_column" => "Column 1",
|
|
"suggestions_fourth_column" => "",
|
|
"suggestions_layout" => "Search Suggestions Layout",
|
|
"suggestions_second_column" => "Column 2",
|
|
"suggestions_third_column" => "Column 3",
|
|
"system_conf" => "Setup & Conf",
|
|
"system_info" => "System Info",
|
|
"table" => "Table",
|
|
"table_configuration" => "Table Configuration",
|
|
"takings_printer" => "Receipt Printer",
|
|
"tax" => "Tax",
|
|
"tax_category" => "Tax Category",
|
|
"tax_category_duplicate" => "The entered tax category already exists.",
|
|
"tax_category_invalid_chars" => "The entered tax category is invalid.",
|
|
"tax_category_required" => "The tax category is required.",
|
|
"tax_category_used" => "Tax category cannot be deleted because it is being used.",
|
|
"tax_configuration" => "Tax Configuration",
|
|
"tax_decimals" => "Tax Decimals",
|
|
"tax_id" => "Tax Id",
|
|
"tax_included" => "Tax Included",
|
|
"theme" => "Theme",
|
|
"theme_preview" => "Preview Theme:",
|
|
"thousands_separator" => "Thousands Separator",
|
|
"timezone" => "Timezone",
|
|
"timezone_error" => "OSPOS Timezone is Different from your Local Timezone.",
|
|
"top" => "Top",
|
|
"use_destination_based_tax" => "Use Destination Based Tax",
|
|
"user_timezone" => "Local Timezone:",
|
|
"website" => "Website",
|
|
"wholesale_markup" => "",
|
|
"work_order_enable" => "Work Order Support",
|
|
"work_order_format" => "Work Order Format",
|
|
];
|