Setup Other: Difference between revisions

Jump to navigation Jump to search
m
Tag: 2017 source edit
Tag: 2017 source edit
Line 41: Line 41:


*ADD_UNSPLASH_LOGIN_BACKGROUND ► The background image will be refreshed on every login page refresh. Background image is pulled from the popular open source image website Unsplash. If an already saved static background image exists, then this code will override it (but not delete the saved image). Warning: Using this may allow an external website to steel your login credentials ► (v10.0)
*ADD_UNSPLASH_LOGIN_BACKGROUND ► The background image will be refreshed on every login page refresh. Background image is pulled from the popular open source image website Unsplash. If an already saved static background image exists, then this code will override it (but not delete the saved image). Warning: Using this may allow an external website to steel your login credentials ► (v10.0)
*MAIN_ALLOW_SVG_FILES_AS_IMAGES ► Allow to use SVG file as image files. Warning: This may introduce security vulnerability (javascript can be embedded into SVG file).


*MAIN_APPLICATION_TITLE ► This will change the title of software (that appears on the login page by default). Warning, changing this may make Dolibarr version detection fail by smartphone applications like [[Application Android - DoliDroid]]
*MAIN_APPLICATION_TITLE ► This will change the title of software (that appears on the login page by default). Warning, changing this may make Dolibarr version detection fail by smartphone applications like [[Application Android - DoliDroid]]
Line 110: Line 108:


*MAIN_MIN_NB_ENABLED_MODULE_FOR_WARNING ► A warning saying setup of modules is not complete is shown if the number of enabled modules is lower or equal than this value (1 if not defined)
*MAIN_MIN_NB_ENABLED_MODULE_FOR_WARNING ► A warning saying setup of modules is not complete is shown if the number of enabled modules is lower or equal than this value (1 if not defined)
*MAIN_MODULES_FOR_EXTERNAL ► Limit available modules for external users. By default value is '<code>facture,commande,contact,propal,projet,contrat,societe,ficheinter,expedition,agenda</code>'


*MAIN_NO_CONCAT_DESCRIPTION ► Allow to use only input custom description in lines (propale, order, invoice) ► (v10.0)
*MAIN_NO_CONCAT_DESCRIPTION ► Allow to use only input custom description in lines (propale, order, invoice) ► (v10.0)
Line 130: Line 126:


*MAIN_ROUNDOFTOTAL_NOT_TOTALOFROUND ► Change way of rounding total TTC lines, rounding first of after.
*MAIN_ROUNDOFTOTAL_NOT_TOTALOFROUND ► Change way of rounding total TTC lines, rounding first of after.
*MAIN_SECURITY_CSRF_WITH_TOKEN ► Activate a second anti-CSRF protection on POST (a POST from another web site can't be done). Note there is already a default protection using test on referrer. This second protection uses TOKEN on forms and is more powerful. ► (v5.0+)


*MAIN_SERVER_TZ ► If you can't set the timezone of your PHP installation, set this constant. Better is to set it to UTC. In future, this constant will be forced to 'UTC' so PHP server timezone will not have effect anymore. Examples: <code>Europe/Paris</code>, <code>auto</code>.
*MAIN_SERVER_TZ ► If you can't set the timezone of your PHP installation, set this constant. Better is to set it to UTC. In future, this constant will be forced to 'UTC' so PHP server timezone will not have effect anymore. Examples: <code>Europe/Paris</code>, <code>auto</code>.
Line 176: Line 170:


*MAIN_WEIGHT_DEFAULT_UNIT ► Default unit for weight (0=kg, -3=g, ...)
*MAIN_WEIGHT_DEFAULT_UNIT ► Default unit for weight (0=kg, -3=g, ...)
*USER_HIDE_INACTIVE_IN_COMBOBOX ► Disable display inactive users in combobox.
*USER_HIDE_INACTIVE_IN_COMBOBOX ► Disable display inactive users in combobox.
*MAIN_DISABLE_PDF_THUMBS ► Disable thumbs PDF in case of imagick bug
*MAIN_DISABLE_PDF_THUMBS ► Disable thumbs PDF in case of imagick bug
*MAIN_KEEP_REF_CUSTOMER_ON_CLONING ► Keep the Customer Reference on cloned object (Propal/Invoice)
*MAIN_KEEP_REF_CUSTOMER_ON_CLONING ► Keep the Customer Reference on cloned object (Propal/Invoice)
*MAIN_DONT_KEEP_NOTE_ON_CLONING ► Remove the object notes during cloning ► (v11.0)
*MAIN_DONT_KEEP_NOTE_ON_CLONING ► Remove the object notes during cloning ► (v11.0)
*MAIN_DOC_SORT_FIELD ► Set the default sorting field on document page (name by default) ► (v11.0)
*MAIN_DOC_SORT_FIELD ► Set the default sorting field on document page (name by default) ► (v11.0)
*MAIN_DOC_SORT_ORDER ► Set the default sorting order (ASC or DESC) on document page (ASC by default) ► (v11.0)
*MAIN_DOC_SORT_ORDER ► Set the default sorting order (ASC or DESC) on document page (ASC by default) ► (v11.0)
*MAIN_USE_ZIPTOWN_DICTIONNARY► Use dictionnary ZIP for create card.
*MAIN_USE_ZIPTOWN_DICTIONNARY► Use dictionnary ZIP for create card.
*MAIN_USE_TOP_MENU_BOOKMARK_DROPDOWN► Show bookmark in top menu with theme eldy ► (v11.0)
*MAIN_USE_TOP_MENU_BOOKMARK_DROPDOWN► Show bookmark in top menu with theme eldy ► (v11.0)
*MAIN_USE_TOP_MENU_SEARCH_DROPDOWN► Show search in top menu with theme eldy ► (v11.0)
*MAIN_USE_TOP_MENU_SEARCH_DROPDOWN► Show search in top menu with theme eldy ► (v11.0)
*MAIN_PHONE_SEPAR ► Separ phone number other space ►(v12.0)
*MAIN_PHONE_SEPAR ► Separ phone number other space ►(v12.0)
*GRAPH_USE_FISCAL_YEAR ► Widgets uses fiscal year
*GRAPH_USE_FISCAL_YEAR ► Widgets uses fiscal year


Line 201: Line 206:
*MAIN_USE_TOP_MENU_QUICKADD_DROPDOWN ► Add a dropdown menu with shortcuts to create new objects ►(v13.0)
*MAIN_USE_TOP_MENU_QUICKADD_DROPDOWN ► Add a dropdown menu with shortcuts to create new objects ►(v13.0)
*MAIN_EMAILCOLLECTOR_MAIL_WITHOUT_HEADER ► Remove the header stored by email collector ►(v13.0)
*MAIN_EMAILCOLLECTOR_MAIL_WITHOUT_HEADER ► Remove the header stored by email collector ►(v13.0)
*
 
*MAIN_SECURITY_ANTI_SSRF_SERVER_IP
*MAIN_USE_VAT_OF_PRODUCT_FOR_COMPANIES_IN_EEC_WITH_INVALID_VAT_ID
*MAIN_USE_VAT_OF_PRODUCT_FOR_COMPANIES_IN_EEC_WITH_INVALID_VAT_ID
*
 
*
 
*SELLYOURSAAS_ENABLE_OPTINMESSAGES
*SELLYOURSAAS_ENABLE_OPTINMESSAGES
*MAIN_OPTIMIZEFORTEXTBROWSER
*MAIN_OPTIMIZEFORTEXTBROWSER
Line 212: Line 216:
*API_DISABLE_LOGIN_API
*API_DISABLE_LOGIN_API
*MAIN_NB_OF_YEAR_IN_WIDGET_GRAPH
*MAIN_NB_OF_YEAR_IN_WIDGET_GRAPH
*
 
 
 
=Security Options=
 
*MAIN_SECURITY_ANTI_SSRF_SERVER_IP ► Can set a complete list of IPs of server.
 
*MAIN_SECURITY_CSRF_WITH_TOKEN ► Activate a second anti-CSRF protection on POST (a POST from another web site can't be done). Note there is already a default protection using test on referrer. This second protection uses TOKEN on forms and is more powerful. ► (v5.0+)
 
*MAIN_MODULES_FOR_EXTERNAL ► Limit available modules for external users. By default value is '<code>facture,commande,contact,propal,projet,contrat,societe,ficheinter,expedition,agenda</code>'
 
*MAIN_ALLOW_SVG_FILES_AS_IMAGES ► Allow to use SVG file as image files. Warning: This may introduce security vulnerability (javascript can be embedded into SVG file).
 
*MAIN_RESTRICTHTML_ONLY_VALID_HTML ► Refused parameter if value is not a valid HTML content.
 
*MAIN_RESTRICTHTML_REMOVE_ALSO_BAD_ATTRIBUTES ► Sanitize also non standard attributes on HTML content.
 
 


[[#Top|(back to top)]]
[[#Top|(back to top)]]

Navigation menu