Search results

Office/group names echoed unescaped into inline <script> in scripts/dropdown_get.php and dropdown_post.php

Status: Open.

#60 In rjonesbsink/timeclock;

· rjonesbsink opened on Jul 15, 2026

Status/role icons in admin/*.php list tables have no alt text

Status: Open.

#59 In rjonesbsink/timeclock;

· rjonesbsink opened on Jul 15, 2026

Name-field validation accepts trailing newlines and rejects the literal string "0" across admin/*.php

Status: Open.

#57 In rjonesbsink/timeclock;

· rjonesbsink opened on Jul 15, 2026

Unguarded tc_select()/tc_query() results across admin/ (mysqli_fetch_array/mysqli_num_rows can fatal on PHP 8+)

Status: Open.

#53 In rjonesbsink/timeclock;

· rjonesbsink opened on Jul 15, 2026

Editing/looking up a user whose name has an apostrophe or ampersand is broken

Status: Open.

#50 In rjonesbsink/timeclock;

· rjonesbsink opened on Jul 14, 2026

IP-spoofing bypass in get_ipaddress() defeats restrict_ips allowlist

Status: Open.

#49 In rjonesbsink/timeclock;

· rjonesbsink opened on Jul 14, 2026

Migrate UI to a Bootstrap-based theme

Status: Open.

#40 In rjonesbsink/timeclock;

· rjonesbsink opened on Jul 14, 2026