objecttothis 171dd056b3 fix(jobs): validate all throttles before saving any ...

Bug: saveThrottles validated and saved throttles in same loop.
Invalid entry mid-loop stopped processing but left already-saved
throttles committed, and omitted throttles could still get deleted
via notToDelete tracking — partial/inconsistent state on failure.

- app/Controllers/Jobs.php: split into two passes — validate all
  throttleData entries first; on any invalid entry, roll back
  transaction and return failure immediately before touching DB.
  Only save/delete once full payload validated. Drop now-redundant
  $success flag folded into invalid-entry early return.
- tests/Controllers/JobsControllerTest.php: add test asserting
  existing throttles stay unchanged in DB when payload contains
  invalid throttle data.

Signed-off-by: objecttothis <17935339+objecttothis@users.noreply.github.com>

2026-09-17 16:22:55 +04:00

..

Attributes.php

fix(xss): remove redundant escaping that double-encoded item attribute values (#4628)

2026-08-09 11:37:38 +04:00

BaseController.php

chore: sync project files to match upstream templates (#4537)

2026-05-12 15:55:36 +02:00

Cashups.php

Add filter persistence for table views via URL query string (#4400)

2026-03-11 20:11:00 +01:00

Config.php

fix(licenses): guard malformed data, parallelize gulp tasks, require Node 20

2026-09-10 17:32:52 +04:00

Customers.php

fix(security): Fix DOMPDF RCE and customer email sanitization (#4568)

2026-06-09 17:58:52 +02:00

Employees.php

fix(tests): resolve all phpunit failures — clean-DB suite green (#4626) (#4691)

2026-09-08 21:49:28 +02:00

Expenses_categories.php

Use Content-Type application/json for AJAX responses (#4357)

2026-03-04 21:42:35 +01:00

Expenses.php

Fix review comments: remove redundant loop and add XSS escaping

2026-03-17 15:32:16 +00:00

Giftcards.php

fix(giftcard): correct return type and rename getGiftcardId method (#4600)

2026-07-24 01:46:52 +04:00

Home.php

fix(reports, home): resolve double-URL-decoding bypass for method grants (#4660) (#4666)

2026-08-31 13:33:09 +04:00

index.html

Replace tabs with spaces (#4196)

2025-03-28 21:24:21 +04:00

Item_kits.php

Ensure payload data is escaped to prevent XSS (#4664)

2026-08-28 10:08:31 +04:00

Items.php

Bugfix tax names (#4677)

2026-09-01 10:59:29 +04:00

Jobs.php

fix(jobs): validate all throttles before saving any

2026-09-17 16:22:55 +04:00

Login.php

Feature: CodeIgniter Throttler (#4619)

2026-08-19 00:25:22 +04:00

Messages.php

Use Content-Type application/json for AJAX responses (#4357)

2026-03-04 21:42:35 +01:00

No_access.php

Feature admin account safeguards (#4657)

2026-08-27 11:29:32 +04:00

Office.php

Use Content-Type application/json for AJAX responses (#4357)

2026-03-04 21:42:35 +01:00

Persons.php

Use Content-Type application/json for AJAX responses (#4357)

2026-03-04 21:42:35 +01:00

Receivings.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Reports.php

fix(reports, home): resolve double-URL-decoding bypass for method grants (#4660) (#4666)

2026-08-31 13:33:09 +04:00

Sales.php

fix(sales): harden unsuspend with auth, status gating, and null safety

2026-09-07 12:18:11 +04:00

Secure_Controller.php

Bugfix tax names (#4677)

2026-09-01 10:59:29 +04:00

Suppliers.php

Use Content-Type application/json for AJAX responses (#4357)

2026-03-04 21:42:35 +01:00

Tax_categories.php

fix(security): prevent SQL injection in tax controller sort columns

2026-04-06 18:37:07 +00:00

Tax_codes.php

fix(security): prevent SQL injection in tax controller sort columns

2026-04-06 18:37:07 +00:00

Tax_jurisdictions.php

fix(security): prevent SQL injection in tax controller sort columns

2026-04-06 18:37:07 +00:00

Taxes.php

fix(security): prevent SQL injection in tax controller sort columns

2026-04-06 18:37:07 +00:00