Commit graph

151418 commits

Author SHA1 Message Date
Laurent Destailleur
29aceee503 Complete fix of MAIN_DISALLOW_UNSECURED_SELECT_INTO_EXTRAFIELDS_FILTER 2026-03-02 03:17:24 +01:00
Laurent Destailleur
7c2e2f4c82 Add a protection against typo error of user. 2026-03-02 02:53:29 +01:00
Laurent Destailleur
115b1e27b0 Try to reduce false postivie of ia scanner 2026-03-02 02:40:06 +01:00
Laurent Destailleur
26c38c52f9 Clean code 2026-03-02 02:15:10 +01:00
Laurent Destailleur
743c22e57c Sec: Fix #GHSA-2mfj-r695-5h9r 2026-03-02 02:04:30 +01:00
Laurent Destailleur
4bfe5d2d4a Protect includes (in case dol_include is used without harcoded filename) 2026-03-02 01:03:34 +01:00
Laurent Destailleur
58852eaa57 Debug v23 2026-03-01 20:01:01 +01:00
Laurent Destailleur
5f99494fed Debug v23 2026-03-01 19:51:08 +01:00
Laurent Destailleur
8976231f35 Fix trans 2026-03-01 19:29:34 +01:00
Laurent Destailleur
1febc39a56 css 2026-03-01 19:19:58 +01:00
Laurent Destailleur
6f2adf3457 Debug v23 2026-03-01 18:52:35 +01:00
Laurent Destailleur
d1a78bf3ac Debug v23 2026-03-01 18:33:28 +01:00
Laurent Destailleur
5756ba2369 css 2026-03-01 18:27:17 +01:00
Laurent Destailleur
6ba0c37ccd css 2026-03-01 18:23:08 +01:00
Laurent Destailleur
3e95f2b456 Automated merge from 22.0 to 23.0 by tool pullmerge.sh 2026-03-01 15:47:51 +01:00
Laurent Destailleur
518f16aea3 Trans 2026-03-01 14:47:27 +01:00
Laurent Destailleur
2e56f40c39 Trans 2026-03-01 14:26:02 +01:00
Laurent Destailleur
91e5b19541 Trans 2026-03-01 14:21:05 +01:00
Laurent Destailleur
5d1c39440d Fix % 2026-03-01 14:13:19 +01:00
Laurent Destailleur
fc13435730 Debug v23 2026-03-01 14:07:41 +01:00
Laurent Destailleur
53ecd7de15 Debug v23 2026-03-01 14:00:16 +01:00
Laurent Destailleur
271af9f8f7 FIX #37171 2026-03-01 12:01:56 +01:00
Laurent Destailleur
ec8898ac50 Add more param 2026-02-28 19:14:00 +01:00
Laurent Destailleur
011eb736b8 Debug v23 2026-02-28 18:47:22 +01:00
Laurent Destailleur
060d7d7a60 Merge branch '22.0' of git@github.com:Dolibarr/dolibarr.git into 23.0 2026-02-28 17:46:49 +01:00
Laurent Destailleur
97f1bbc219 Merge branch '22.0' of git@github.com:Dolibarr/dolibarr.git into 23.0 2026-02-28 17:42:25 +01:00
Laurent Destailleur
c99e556ba8 FIX #36907 Close #37100 2026-02-28 16:50:41 +01:00
Laurent Destailleur
38590d0357 Fix missing import key 2026-02-28 15:35:42 +01:00
Laurent Destailleur
5aee214f75 Add missing import_id 2026-02-28 15:31:19 +01:00
Laurent Destailleur
6a458223b1 Automated merge from 22.0 by tool pullmerge.sh 2026-02-28 11:31:01 +01:00
Laurent Destailleur
ad90eb7a7c Automated merge from 21.0 by tool pullmerge.sh 2026-02-28 11:28:30 +01:00
Laurent Destailleur
c65c7678b1 Automated merge from 20.0 by tool pullmerge.sh 2026-02-28 11:28:27 +01:00
Laurent Destailleur
dc12867364 Automated merge from 19.0 by tool pullmerge.sh 2026-02-28 11:28:25 +01:00
Laurent Destailleur
a1e255a846 Automated merge from 18.0 by tool pullmerge.sh 2026-02-28 11:28:22 +01:00
Laurent Destailleur
3daff81110 Automated merge from 17.0 by tool pullmerge.sh 2026-02-28 11:27:20 +01:00
Laurent Destailleur
a424b368a0 css 2026-02-28 10:58:30 +01:00
Alexandre SPANGARO
01ac580441
FIX "Undefined array key" warnings in import_csv.modules.php on $this->cacheconvert access (#37349)
Co-authored-by: Laurent Destailleur <eldy@destailleur.fr>
2026-02-27 17:17:26 +01:00
Anthony Berton
ce02010542
FIX - Show POS in Order and Invoice list (#37364)
* FIX - Show POS in Order and Invoice list

* Update list.php

* Change $showpos value type from int to string

* Refactor POS fields visibility logic

---------

Co-authored-by: Anthony Berton <anthony.berton@bb2a.fr>
Co-authored-by: Laurent Destailleur <eldy@destailleur.fr>
2026-02-27 17:15:41 +01:00
minimexat
4ad18d1219 Fix external user 'Access Forbidden' on agenda event card (#37362)
External users (fk_soc set) were blocked from opening agenda events
because GETPOSTINT('socid') returns 0 when no socid param is in the URL
(ActionComm::getNomUrl() only generates ?id=XXXXX).

The condition 0 != $user->socid then triggers accessforbidden() for
every external user.

Fix: fall back to $user->socid when socid is not in the URL, consistent
with the pattern used in all other card pages (contracts, invoices,
orders, etc.).

The existing restrictedArea() check still validates that the event's
fk_soc matches the user's company, so security is preserved.

Fixes #37361

Co-authored-by: Laurent Destailleur <eldy@destailleur.fr>
2026-02-27 16:38:01 +01:00
Regis Houssin
cd4833e6de
FIX #37339 (#37340)
Co-authored-by: Laurent Destailleur <eldy@destailleur.fr>
2026-02-27 16:05:47 +01:00
Anthony Berton
e522839aa0
FIX - Twice the check in resource list column (#37342)
* FIX - Twice the check in resource list column

* Update copyright information in list.php

Added copyright notice for 2026.

---------

Co-authored-by: Anthony Berton <anthony.berton@bb2a.fr>
2026-02-27 16:02:24 +01:00
HENRY Florian
cfb6fa89d9
fix: php 8 warning Array To String (#37371)
* fix: php 8 warning Array To String

* Change logging to use json_encode for parameters

---------

Co-authored-by: Laurent Destailleur <eldy@destailleur.fr>
2026-02-27 16:00:54 +01:00
atm-adrien
d0860270ac
FIX : Entity on group ticket insertion (#37370) 2026-02-27 15:40:10 +01:00
Milamber
40414d35a3 Fix issue with amount in letters for French (soixante-dix+ and quatre-vingt dix+) (#37369)
Comments in EN
2026-02-27 15:23:01 +01:00
Anthony Berton
c326ab68f0
FIX - If a specific pricing system is applied, the price type is not specified (#37348)
* FIX - If a specific pricing system is applied, the price type is not specified

* Add 2026 copyright for Anthony Berton

Added copyright notice for Anthony Berton for 2026.

---------

Co-authored-by: Anthony Berton <anthony.berton@bb2a.fr>
2026-02-27 14:49:14 +01:00
Laurent Destailleur
023061e370 Merge branch '23.0' of git@github.com:Dolibarr/dolibarr.git into 23.0 2026-02-27 14:46:53 +01:00
Alexandre SPANGARO
4349cc83e4
FIX Variant - CSS (#37337) 2026-02-27 14:37:58 +01:00
Frédéric FRANCE
6282af73bf
do not keep date_creation when cloning product (#37351) 2026-02-27 14:37:20 +01:00
Lucas Marcouiller
f09e8916c3
Fix bad rounding when spliting discounts (#37354)
* Fix bad rounding when spliting discounts

* fix ci

---------

Co-authored-by: Lucas Marcouiller <lmarcouiller@dolicloud.com>
2026-02-27 14:36:28 +01:00
Laurent Destailleur
7acb0e0d4d Merge branch '22.0' of git@github.com:Dolibarr/dolibarr.git into 23.0 2026-02-27 14:36:22 +01:00