Vladimir Tomashevskiy
a9b08bdc6e
Fix CSRF token in POST body for AJAX requests
...
- Add csrf_token parameter to fetch() body
- CodeIgniter 4 CSRF filter requires token in POST body, not just headers
2026-02-08 16:28:16 +00:00
Vladimir Tomashevskiy
e85390be84
Use base.js CSRF auto-injection for AJAX requests
...
- Remove manual CSRF handling from JavaScript
- base.js already intercepts fetch() and adds X-CSRF-TOKEN automatically
- Simplify JavaScript code for subtasks operations
2026-02-08 15:51:06 +00:00
Vladimir Tomashevskiy
1c98327de3
Add csrf_token and csrf_hash Twig functions
...
- Add csrf_token() function to return CSRF token name
- Add csrf_hash() function to return CSRF hash value
2026-02-08 15:43:48 +00:00
Vladimir Tomashevskiy
f6aebd8b66
Fix CSRF token syntax in JavaScript
...
- Use Twig {{ csrf_token() }} and {{ csrf_hash() }} helpers
- Remove invalid PHP syntax from JS
- Add getCsrfData() helper function
2026-02-08 15:29:25 +00:00
Vladimir Tomashevskiy
85a920b49a
Fix CSRF token validation for consecutive AJAX requests
...
- Add CSRF token to all AJAX requests
- Fix addSubtask, toggleSubtask, deleteSubtask to include CSRF
2026-02-08 15:20:36 +00:00
Vladimir Tomashevskiy
5bf25d9505
Fix subtask form AJAX submission
...
- Add onsubmit handler to prevent default form submission
- Add addSubtask() function for AJAX form submission
- Update subtasks list dynamically after adding
- Add updateSubtasksCount() helper function
2026-02-08 15:08:42 +00:00
Vladimir Tomashevskiy
cee6c636ad
Tasks Module Stage 2: Subtasks
...
- Create task_subtasks table migration
- Create TaskSubtaskModel with CRUD operations
- Add subtask API methods: addSubtask, toggleSubtask, deleteSubtask
- Update TaskService to include subtasks in getTask()
- Add Routes for subtasks API
- Update show.twig with subtasks UI and JavaScript
2026-02-08 14:55:45 +00:00
Vladimir Tomashevskiy
d7fec7169f
Tasks Module Stage 1: RBAC + Validation + Events Fix
...
- Add canCreate/canEdit/canDelete checks in TasksController
- Add input validation in store() and update() methods
- Fix events naming: task.* (singular) instead of tasks.*
- Add CSRF validation and parameter checks for API endpoints
2026-02-08 14:03:26 +00:00
root
9b8d10bbfa
some fixes
2026-02-08 16:57:25 +03:00
root
725c62a179
start tasks module
2026-01-23 08:48:06 +03:00
root
283b9132a0
add Userguide
2026-01-19 11:26:23 +03:00
root
82acbd8c82
fix CRM contacts
2026-01-18 20:11:53 +03:00
root
308c684aa2
fix CRM contacts
2026-01-18 19:19:03 +03:00
root
77f76c8c28
Many fixes
2026-01-16 21:58:12 +03:00
root
b810a17649
add CRM module start
2026-01-15 07:09:36 +03:00
root
b14f293a45
docs
2026-01-14 07:26:49 +03:00
root
edb4df7e37
add superadmin dashboard. subscriptions
2026-01-13 20:03:16 +03:00
root
3c24c250e5
add EventManager and Subscription
2026-01-13 12:08:40 +03:00
root
3d39c1ba07
user profile
2026-01-13 07:11:21 +03:00
root
24ea8deeec
add anywhere csrf protection
2026-01-12 18:31:04 +03:00
root
c55264cf42
refactoring
2026-01-12 18:15:12 +03:00
root
077b79b8f7
change ratelimiter
2026-01-12 17:50:46 +03:00
root
246ca93307
dashboard for org
2026-01-12 11:58:12 +03:00
root
d27f66953c
dynamic table
2026-01-10 19:43:04 +03:00
root
5f5a28e292
first commit
2026-01-10 16:16:39 +03:00