objecttothisandTravis Garrison 3bafa07e04 fix(sales): enforce server-side authorization for price changes (#4631) ...

Client-side \"change_price\" flag is UI-only, not trustworthy. Compare
submitted price against current cart price server-side and require
sales_change_price grant when they differ, else reject with
not_authorized error.

Signed-off-by: Travis Garrison <travis@chiraqbookstore.com>
Co-authored-by: Travis Garrison <travis@chiraqbookstore.com>

2026-08-07 02:20:01 +04:00

..

Config

fix(config): validate theme param to prevent XSS via invalid theme (#4620)

2026-08-07 02:18:44 +04:00

Controllers

fix(sales): enforce server-side authorization for price changes (#4631)

2026-08-07 02:20:01 +04:00

Database

Add Guards to Database Migration (#4571)

2026-06-06 02:02:42 +04:00

Events

Bugfix: Fix problems with migration UI in login (#4589)

2026-07-07 10:35:25 +04:00

Filters

Upgrade to CodeIgniter 4.1.3

2024-06-15 17:19:15 +02:00

Helpers

Feature: Payment reference code (#4587)

2026-07-10 13:49:05 +04:00

Language

Feature: Payment reference code (#4587)

2026-07-10 13:49:05 +04:00

Libraries

fix(login): skip auth validation on new install to allow migration (#4609)

2026-08-05 11:48:05 +04:00

Models

fix: get_definition_by_name() returns single row instead of multi-dimensional array (#4452) (#4464)

2026-08-06 12:27:13 +04:00

ThirdParty

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

Views

fix(config): validate theme param to prevent XSS via invalid theme (#4620)

2026-08-07 02:18:44 +04:00

.htaccess

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

Common.php

Upgrade CI to 4.4.3

2024-06-15 17:19:15 +02:00

index.html

Corrected link in README.md

2024-06-15 17:19:15 +02:00