Commit Graph

811 Commits

Author SHA1 Message Date
Jeremy Quinton 09335d7aee added image reference 2018-11-04 21:06:17 +02:00
Jeremy Quinton e8d69469be remove migs and coinbase as default gateways 2018-11-04 20:50:24 +02:00
Jeremy Quinton c26bc6b2df fixes bug where sales volume is not incremented correctly 2018-11-04 20:39:42 +02:00
Sebastian Schmidt 0b831955f2 Fix a DoS or even PrivEsc vuln on POST /install
POST on /install must not respond when already installed. Denial of Service and possibly Privilege Escalation by changing the database/mail server
2018-10-02 18:23:33 +10:00
Sebastian Schmidt 5cdfe7151b Fix XSS vulnerability on QR code scanner 2018-10-02 18:15:58 +10:00
Bastien 238e607e73 Fix typos 2018-10-01 18:58:18 +02:00
Bastien 3df6bc1aeb Start translating resources/lang/fr/Controllers.php 2018-10-01 18:53:09 +02:00
johanricher c39587c571 started translation 2018-10-01 17:01:57 +02:00
johanricher a2da46ce5a setup to start translation 2018-10-01 16:58:08 +02:00
Jeremy Quinton 510bdefec2 Merge pull request #475 from dsnap1993/master
fix bug where postMessageOrder gets datas of orders table
2018-09-28 19:46:48 +02:00
dsnap1993 d6bada6382 fix bug where postMessageOrder gets datas of orders table 2018-09-29 01:15:57 +09:00
Sebastian Schmidt f7c5a97b98 Update artisan from upstream 2018-09-22 13:04:58 +10:00
Sebastian Schmidt d58672cc41 fixes https://github.com/Attendize/Attendize/issues/327 2018-09-22 13:04:57 +10:00
Sebastian Schmidt faca37e3d2 Improve private_reference_number randomniss 2018-09-22 13:03:19 +10:00
Sebastian Schmidt 6ad529d578 Fix php 7.2 support when ordering tickets 2018-09-22 13:03:19 +10:00
Sebastian Schmidt 2458765463 Increase min password lenght to 8 chars
> Verifiers SHALL require subscriber-chosen memorized secrets to be at least 8 characters in length. Verifiers SHOULD permit subscriber-chosen memorized secrets at least 64 characters in length. All printing ASCII [RFC 20] characters as well as the space character SHOULD be acceptable in memorized secrets. Unicode [ISO/ISC 10646] characters SHOULD be accepted as well. To make allowances for likely mistyping, verifiers MAY replace multiple consecutive space characters with a single space character prior to verification, provided that the result is at least 8 characters in length. Truncation of the secret SHALL NOT be performed. For purposes of the above length requirements, each Unicode code point SHALL be counted as a single character.

https://pages.nist.gov/800-63-3/sp800-63b.html#-5112-memorized-secret-verifiers
2018-09-22 13:03:19 +10:00
Sebastian Schmidt c991941ef3 Update session preferences from upstream 2018-09-22 13:03:19 +10:00
Sebastian Schmidt 9365d74567 Cleanup and http -> https 2018-09-22 13:03:19 +10:00
Jeremy Quinton abd23bd703 Merge pull request #460 from Attendize/fix-date-off-by-one
Fixes #414 #450 #434
2018-09-15 23:33:02 +02:00
Jeremy Quinton c3cd0a60c7 fixes #414 #450 #434 2018-11-04 21:02:41 +02:00
Jeremy Quinton 3dd673b1ec Merge pull request #457 from Attendize/escape-translations-correctly
Replace lang with trans and escape html correctly for various views
2018-09-11 21:22:54 +02:00
Jeremy Quinton 562b8698dd Merge branch 'master' of https://github.com/Attendize/Attendize 2018-11-04 20:53:34 +02:00
Jeremy Quinton 920fbac64e replace lang with trans and escape html correctly for various views 2018-11-04 20:22:51 +02:00
Jeremy Quinton 81d67e4180 updated copy in install process 2018-11-04 20:15:21 +02:00
Jeremy Quinton 6e0c37d701 bump mysql version and load laravel environment variables into php container 2018-11-04 20:06:59 +02:00
Sam Bell 5ac96236fa Corrected licence info to Composer standards 2018-09-06 22:37:26 +08:00
Jeremy Quinton 55c77e8705 added line break 2018-09-03 21:58:20 +02:00
Jeremy Quinton f808a81707 better styling 2018-09-03 21:56:31 +02:00
Jeremy Quinton f31d341def broke up paragraph 2018-09-03 21:55:26 +02:00
Jeremy Quinton ae5958d5b2 added newlines 2018-09-03 21:54:39 +02:00
Jeremy Quinton d3a520badc fixed typo 2018-09-03 21:53:48 +02:00
Jeremy Quinton 6c914e0ece Merge branch 'master' of https://github.com/Attendize/Attendize 2018-09-03 21:52:41 +02:00
Jeremy Quinton 0b0de19bf8 simplified readme which now links to the documentation website 2018-09-03 21:52:23 +02:00
Scott Bowler 534d3a2126 Modify deprecated "lists" to "pluck" 2018-09-03 14:44:56 +01:00
Scott Bowler 118efbe8ae Fix issue where taxamt not set after import 2018-09-03 10:49:29 +01:00
Jeremy Quinton a4fb2519aa fixed issue with installed when app key is regenerated to make key length 32 characters and not 16 2018-09-02 23:16:40 +02:00
Jeremy Quinton b257eeb3d3 Merge pull request #446 from heilgar/445-surveys-list-bug
445 fix surveys bug after updating to L5.6
2018-09-02 19:40:45 +02:00
Jeremy Quinton db148aa45d use trans instead of lang so messages display correctly with html not escaped 2018-09-02 18:09:39 +02:00
heilgar 6d9fd0ccdc 445 fix surveys bug after updating to L5.6 2018-09-02 19:01:53 +03:00
Jeremy Quinton d693976f24 added extra troubleshooting steps 2018-08-29 08:17:59 +02:00
Jeremy Quinton 0b2cfa6ebf use send instead of queue method for mail when inviting attendee 2018-08-23 10:42:05 +02:00
Jeremy Quinton 9d29ce0d2b Merge pull request #429 from Attendize/better-error-handling
Handle errors independently of one another
2018-08-22 16:50:41 +02:00
Jeremy Quinton 5f2c4c8ac9 Merge pull request #424 from Attendize/upgrade-laravel-5.6
Upgrading to Laravel 5.6
2018-08-21 12:55:31 +02:00
Jeremy Quinton 0d4f035ce4 removing composer lock.
Not including composer lock. Users of attendize can generat there own lock file.
2018-08-21 12:50:21 +02:00
Jeremy Quinton 5087218306 Removed setFetchMode function
Laravel 5.4 removed support for setFetchMode so convert array of object to array of arrays manually.
2018-08-21 12:38:00 +02:00
Jeremy Quinton d49934ab07 final lock file for composer 2018-08-21 12:12:30 +02:00
Jeremy Quinton a71cb6aeac Tweeks to readme to make it more readable. 2018-08-19 20:24:09 +02:00
Jeremy Quinton 73b7808ff4 When an order is refunded display the actual refunded amount.
When viewing a refunded order display the amount_refunded instead of the order amount.
2018-08-17 17:13:57 +02:00
Jeremy Quinton afc50a04b8 Mark order as paid if ticket price is zero
When inviting an attendee if the ticket price is free mark the order as paid to prevent orders being marked as unpaid
2018-08-17 16:54:03 +02:00
Jeremy Quinton 68c82e0b34 Moved forgetting session and where events are fired
1. After we have save the order to the database forget the session.
2. Firing events to create and send tickets should only be done after the we have saved the order to the database
2018-08-17 16:15:31 +02:00