5 Commits

Author	SHA1	Message	Date
Tom van Leeuwen	4a6a0af489	honoring config option force_ip_to_sysname in bill creation and editing (#10382) ... * honoring config option `force_ip_to_sysname` in bill creation and editing * refactored variable name to match it in edit.inc.php * forgot one variable * and one more :S * Update new_bill.inc.php * Update edit.inc.php * Update new_bill.inc.php * Update edit.inc.php * Update edit.inc.php * Update edit.inc.php Co-authored-by: Neil Lathwood <gh+n@laf.io> Co-authored-by: Tony Murray <murraytony@gmail.com>	2020-04-11 19:10:45 -05:00
Tony Murray	217969e140	Update php-codesniffer (#11368) ... * PHPCS 3.5+ * Fix newly detected style issues	2020-04-03 08:41:24 -05:00
Tony Murray	3ead462549	Enable CSRF protection (#10447) ... * Enable CSRF protection * fix style issues	2019-07-17 07:20:26 -05:00
Tony Murray	f3ba8947f7	Use Config helper (#10339) ... remove usage of global variable	2019-06-23 00:29:12 -05:00
Tony Murray	36431dd296	Security fix: unauthorized access (#10091) ... * Security fix: unauthorized access Affects nginx users: Moved php files outside of public html directory (Apache was protected by .htaccess) Affects all users: Some files did not check for authentication and could disclose some info. Better checks before including files from user input * git mv html/includes/ includes/html git mv html/pages/ includes/html/	2019-04-11 23:26:42 -05:00