In a Non-Default Company (non zero company number) , attempting to update a User's Print Profile results in a CSRF Attack Error.

All other fields can be changed without any errors in both default and non default companies.

Setup -> User Accounts Setup -> Edit Any User

The $_SESSION['csrf_token'] is different from the $_POST['_token'] and hence the function check_csrf_token() in line 67 of includes/ui/ui_controls.inc fails.

This means that the session variable gets restarted on the end_form() function that generates a new session which seems to jump the gun.

Also the db schema default value for the print_profile field in the users table should be blank instead of 1 as it stores a string value of the profile name when assigned.

AJAX is a means of dynamically changing a portion of the page (in this case, items in a category) according to some other field selection (in this case, category).

Example

Some Keyboard shortcuts may work only from FireFox and possibly others only in MS IE.

Wiki

You can sell a service - hosting, support, implementation, backup, customisation, migration, template creation, platform glue, etc., but not the code per se.

If you make a compiled (GTk, C++, VB, etc.,) version using means like SimpleAPI you can make it valid for a trial period with licencing - it may not be adhering to the GPL though.

5,981

(11 replies, posted in Translations)

Wikiied it!

5,982

(8 replies, posted in Wish List)

The URL cannot be reached at all now.....

5,983

(7 replies, posted in Setup)

Wikiied it!

5,984

(45 replies, posted in Modules Add-on's)

Thanks Andres, reflected it in the Wiki.

Since POST(Edit) and DELETE use the same syntax, how does the API distinguish between the two? If the POST has no field data is it to be assumed to be a DELETE?

A sample php usage to demonstrate putting in data into FA would be nice.

5,985

(45 replies, posted in Modules Add-on's)

Line 372 in index.php :

$rest->post('/itemcosts/', function() use ($rest){

should be:

$rest->post('/assets/', function() use ($rest){

The Wiki Page stands updated.

Attached herein is the updated api.zip file with this fix ready to go into the modues/api folder.

5,986

(8 replies, posted in Wish List)

Incorrect Password

5,987

(2 replies, posted in Modules Add-on's)

Incorrect Password

http://www.dwmbeancounter.com/tutorial/Tutorial.html

New company with a new COA without demo data.

5,990

(27 replies, posted in Dimensions)

These are attributes of a product / item - osCommerce, Prestashop and other shopping carts have them.

AJAX Anyone?

Here is a simple way to migrate any data into FA, for example:

Import of huge number of Bank Accounts.

1. Take a sql dump (SQL1) of the data only of your existing FA database - no need for the schema. Do this while being logged into FA at the Bank Account data entry form with no other users logged in.

2. Enter one bank account manually into FA.

3. Take another sql dump (SQL2) of the data only of the same database.

4. Now observe the difference between the two SQL dumps - SQL1 and SQL2.

5. Make a set of insert / update statements (SQLsynch) that will simulate the data synch from SQL1 to SQL2.

6. Import the CSV of you bank accounts into some table schema that has all the relevant data for SQLsynch statements.

7. Using SQL statements or Excel CONCATENATE formulae, create a set of SQLsynch statements for the whole set of bank accounts.

8. Execute this newly created SQLsynch statements set in the database.

Viola! If all went well, you've managed to import the whole set of bank accounts into FA!

Now make a php script to acquire the CSV from your source and populate the current version of FA and submit it to the project so that others will benefit from the migratory effort.

SQLyog Ultimate has a data synch wizard that will make the SQLsynch statement generation a breeze.

5,993

(9 replies, posted in Setup)

TimeZone Setting for MySQL server may also be an issue if timestamp fields are used. datetime fields set purely using php should be managed in php.ini / config.php setting of php timezone variable. Mysql time computation with NOW() or CURRENT_TIMESTAMP may also be an issue if used in FA.

5,994

(3 replies, posted in FA Modifications)

Based on the value of a config variable say $Advance_Recurring_Invoice = false; in config.default.php or a sys_prefs table value settable in Company Setup (preferable), we choose to have Line 145 in sales/create_recurrent_invoices.php as:

$overdue = date1_greater_date2($today, 
            ((isset($Advance_Recurring_Invoice) &&  $
              AdvanceRecurringInvoice) ? $last_sent : $due_date)) && 
         date1_greater_date2($today, $begin) && 
         date1_greater_date2($end, $today);

This may have to reflect in some reports as well........

May need a check to see if $last_sent exists in the first place.....

5,995

(12 replies, posted in Announcements)

The said page history shows that on Aug 21st, 2012 @surreyhills changed it to the incorrect version:
"Chart of Accounts within FrontAccounting are ..."

5,996

(45 replies, posted in Modules Add-on's)

Thankyou Andreas. Your work is simply fantastic. PUT may allow encryption, POST may not. If you can get PUT to work, then we can not only ensure standard REST, but also progress with the protocol changes as it occurs.

I am trying to fathom and document the external server side to be able to interact with SimpleAPI.

Maybe another SimpleAccessAPI project would dovetail to interface with FA thru the SimpleAPI extension.

This, I hope will be the basis for a full fledged Open Source POS connector / system that FA currently lacks natively.

Multiple branches maintaining transactions pertaining to their branch only (Dimension / Profit Centre) can synch / post to a central head office FA for consolidation or choose to synch fully every few minutes or in realtime (bandwidth and latency issues) so that all can work locally and yet use all of the same data.

Also compiled (GTk, VB, C++, etc) clients for FA would soon be possible.....

5,997

(45 replies, posted in Modules Add-on's)

Updated Read Test File.

5,998

(2 replies, posted in FA Modifications)

Makes sense. Except that .htaccess files were being maliciously overwritten and the *.inc files got exposed on the browser. Now incorporated the contents of the .htaccess file into the main apache conf file itself and removed the .htaccess file in Debian Squeeze to work as expected.

Thanks. Wikied the info.

5,999

(2 replies, posted in Setup)

Thanks Janusz, wikied it.

6,000

(45 replies, posted in Modules Add-on's)

Updated the SimpleAPIModule Wiki page with a read example that can be executed from an external server.