apmuthu wrote:

Disable rights for the dbuser for the said default db in question!

Anyway, only the default admin company (0) gets to use the Create/Add New Company Meny Item - so where's the security vulnerability?

Try this for a quick experiment.

**** Procedure removed to reduce risks to existing users ****

With the above procedure, the company with the table prefix 10 will get over-written.

Do you think that is a vulnerability? Is there a way around it?
Yes, there is. Create each new company with a different database.

Cheers

102

(5 replies, posted in Setup)

Janusz, may I suggest a change?
If the company folders get the same name as the table_prefix then there won't be any need to rename the folders after deleting a company.

Carmelo

103

(22 replies, posted in Accounts Receivable)

Janusz Thanks.

Carmelo

104

(5 replies, posted in Setup)

itronics wrote:

When you delete company, all the company/x folder is deleted, together with all attachments file. In fact deleting company means you do not want to use the company data anymore. If this is not the case you have to do both database and attachments folder backup. before company deletion.

Janusz

The problem is not with deleting the folder company/x the real problem lies in that after deleting the company, all companies that were created after the deleted company will get a different folder. This will render any previously made folder backups useless.

Is it possible to have the companies stay with their folder for the lifetime of the company?

Thanks

105

(22 replies, posted in Accounts Receivable)

Thanks for this information. I will check each and every option available.

Regards,

While it is true that one can change the database even without this modification, the default setting is to show the current database in use. Sharing the same database name between companies creates a vulnerability in the system.

107

(5 replies, posted in Setup)

The Backup and Restore function works on the database.
So what happens to attached documents? Are these saved in the database as well (as blobs)? If that is the case the no problem. On the other hand, if such documents are not saved in the database, then one has to backup the company folder as well. These are located in fa/company/xx where xx is a number starting at  0, 1, 2, etc.

Now I am assuming that the attachments are left in the folder fa/company/xx/attachments. And that the table xx_attachments only points to this location.

So let's say I have been backing up my companies on a regular basis and writing my backups to DVD for quite some time. What happens when a company is deleted? The folder of the company is changed. sad

Now all my backups point to the wrong folder. Sometimes it happens that I want to go back six months or even a year. Restoring old backups may ruin current companies.

My suggestion: For each and every new company create a new database. (see my other post elsewhere for modifying fa to do just that). But most importantly, create the company in a folder with the same name as the database. This way, all company details remain the same, throughout the lifetime of the company.

Also, when deleting a company, make sure to delete the folder AND drop the database.

What say you?

108

(22 replies, posted in Accounts Receivable)

I am trying to understand how this POS function works in FA.
Is there any help about this? or Can anyone provide some clues?

Does this function provide connectivity to a POS? Is there any compatible POS that connects directly to FA?

Cheers,

When sharing the same database for different companies, there exists the possibility that a user of one company maliciously overwrites the data of another company. To eliminate this risk, one has to use a different database for each company.

I have eased the process this way:

in fa/admin/create_coy.php add the following code:

function rand_string( $length ) {
    $chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";   

    $size = strlen( $chars );
    for( $i = 0; $i < $length; $i++ ) {
        $str .= $chars[ rand( 0, $size - 1 ) ];
    }

    return $str;
}

then CHANGE the following lines:
        else
        {
                $_POST['tbpref'] = $tb_pref_counter."_";
                // Insert the current settings as default
                $conn = $db_connections[user_company()];
                $_POST['name'] = '';
                $_POST['host']  = $conn['host'];
                $_POST['dbuser']  = $conn['dbuser'];
                $_POST['dbpassword']  = $conn['dbpassword'];
                $_POST['dbname']  = $conn['dbname'];
        }

TO:

        else
        {
                $_POST['tbpref'] = $tb_pref_counter."_";
                // Insert the current settings as default
                $conn = $db_connections[user_company()];
                $_POST['name'] = '';
                $_POST['host']  = $conn['host'];
                $_POST['dbuser']  = $conn['dbuser'];
                $_POST['dbpassword']  = $conn['dbpassword'];
                $_POST['dbname']  = rand_string(8);             //$conn['dbname'];
        }

This would put a random 8 character string in the database name every time a new company is about to be created. One can always overwrite what is presented.

Can we have this included in the next release?

Hi fabmendez,
I have the same situation. It would also be nice to have a lost password function.
I did manage to remove the dropdown and login to different companies, however, as soon as you delete a company, the codes that lead access to companies might change.

It seems that such a change requires a modification of how the company index is obtained. At the moment it is searched from the file config_db.php, I think it would have been better to have it stored in its own MySQL table. But that requires a change to the whole front-end of FA.

Anyone with ideas in this area?

111

(1 replies, posted in Banking and General Ledger)

The problem has been solved.
In the local VAT system, the word Exempt is used to denote that certain items are Exempt of paying VAT.
There is a dropdown in "Items Tax Types" that says "Items Fully Exempt". If this is set to YES then no tracking is kept.
If you need the amounts of sales and purchases under a particular Item Type, this dropdown must be set to "NO".

Carmelo

112

(3 replies, posted in Installation)

Hello Gouwca,
You'll have to give us more information on your setup before anyone could suggest a thing or two.
What operating system did you install FA on? Which WEB server are you using? IIS or Apache?
The more info you provide the better the help you may receive.

113

(3 replies, posted in Report Bugs here)

The problem has been solved smile
In 'Item Tax Type' there is a dropdown for 'Is Fully Tax-exempt'.
When this is set to 'YES' the tax is not reported in the TAX Report.

Since I was working on 0% VAT Exempt, I thought that that setting should be YES.

Carmelo

114

(3 replies, posted in Report Bugs here)

Thanks Joe for the reply.
I am using "Direrct Invoice" with Items and Services marked as 0% VAT. Still no joy with TAX Enquiries Report that does not report the 0% Exempt Sales and Purchases.

We are not using GL entries directly to the Bank.

Carmelo

TAX Inquiry shows proper amounts for all TAX percentages except for the 0% (Exempt) TAX.

116

(10 replies, posted in Banking and General Ledger)

joe wrote:

The tax inquiry will give you no. 2. The net amount is calculated backwards.

It is very important that the net amounts are entered correctly in respect to the tax. This is quite known by accountants.

This is why I recommend that you create Quick Entries for your most frequently entries. This will avoid these erroneous entries.

/Joe

If the net amount is calculated backwards, then how does FA calculate the amount for 0% VAT (Exempt) ?
This is probably the reason I cannot get an amount for this TAX rate. How can we go around this issue?

Thanks
Carmelo

117

(1 replies, posted in Banking and General Ledger)

Hello,

When filling the VAT Return, one has to fill in the amount of sales and purchases of items and services that have a 0% VAT, also, in a separte location one has to fill the amounts of Intra EU and Out of EU 0% VAT amounts.

In my setup under Tax Types, I created two different 0% VAT (TAX) types and each is linked to a different GL Account.
Then I created relevant TAX Groups as well and also created Item Tax Types.

Then I created Items that use one or the other of the 0% VAT Types.
After issuing some invoices, I issued the TAX report, but the 0% VAT entries (amounts) remain 0.00

What am I missing?
Thanks and regards
Carmelo

118

(5 replies, posted in Setup)

Is there an easy way to migrate past year's accounts from Sage to FrontAccounting.
Any help with this matter would be appreciated.

/Carmelo