devnawjesh / hr-payroll Goto Github PK

title and

2nd issue, In super admin panel, Red dot never goes away form notifications area.

Well if you say me how to make a translation, Ill do it...^^ Best regards

there is no routing details available. can you please update

Hi, i cant open/login using superadmin role

When I try to add a new employee, I see 2 problems:

1. There is a "username" field in the "Add New Employee" page, whereas the database table of employees does not have a "username" field. Also the username is not shown on the profile page.

2. New employee is created, but I see following error
   

How to use addbulk attendance, give me a csv format...

Error when generating payroll

No place to add Employee password.

What is the recommended db charset and collation for CI 3?

Enter wrong username & password ...page refresh only...
no message show...example: invalid username password or something

and click cancel button not work

(i) Blood type field to be removed

(ii) When uploading an image, it doesn’t fit the allowed dimensions. It should be able to shrink size and accept all type of size.

(iii) When editing or submitting info it pops up a white page. It should redirect you to previous page.

(iv) Addition of Tax pin No, Social security No, Medical Insurance No, and ID number fields. Delete NID number field.

(v) Leave management system not working, employees subjected to leave as per labor laws of the country and attendance should be imported from excel document.

(vi) Payroll not fully working. Integrate it to follow the Labour laws. Payroll list to be pulled from the system in either excel or pdf file formats. It should execute individuals payslips and payroll statement for the whole organisation contrary to individual departments.

(vii) Loan feature not available in the employee portal. Employees should be able to apply for advance and long-term loan to repaid in period of 3months, 6months, 9monts or 1year and the rate should be applied by the admin.

(viii) Employees should be able to view and search for their colleagues contact information in the system and they shouldn’t have any admin rights contrary to the current system. They shouldn’t have the setting button in their dashboard.

(ix) Employees should be able to view previous pay slips, projected salary and be able to print their salaries.

(x) Salary shouldn’t autofill itself and it should follow the taxation system.

(xi) Employees should be added by admin and they should change their password on their first log in and incase they forget their passwords they should be able to change using the forget password link.

(xii) Upon every subsequent login it should have a 2FA whereby it prompts a verification code via registered number contrary to the current state.

(xiii) The site should be made SSO since other system should be added to the site in the near future.

(xiv) Fix any other bugs not captured above and ensure the system runs swiftly and smoothly.

Doesn't login with the given credentials, the page refreshes but doesn't move further.

Employee has admin rights to add other employees. Check your code and rectify it.

Getting error message 404 not found after entering given user name and password.
Imported genhr.sql successfully.

need support.

deployed the package in CenOS with Nginx.

when try to adding attendance, it's not adding.
please help me!

When I am logged in as Admin, I can edit Super Admin profile. This should not happen. Can you please review the users, roles and permissions?

Could you please tell me about this salary sheet.

Can't log-in, after I enter the credentials provided it just redirects me to http://localhost/hr-payroll-master/login, I used to be able to log-in using the credentials provided, I don't know now why I can't.

@Devnawjesh

what is the project status? i m interested, cos i cannot see activity of main developer in any other projects

I tried to host in 000webhost it's giving me an error.
A Database Error Occurred
Unable to connect to your database server using the provided settings.

Filename: controllers/Login.php

Line Number: 22

The connection is correct, I set the correct credential in config/database.php

I cant able to add bulk attendance report

I can't log in, either with the superadmin user, admin or employee.

url : login/Login_Auth

404 Page Not Fount

Setting up on Windows uwAmp localhost , upon login you receive 404 error -> File not found "Login/Login)Auth.php...

please advice

i like to say that your hr payroll application is awesome ..could you please add user registration and forgot password

Message :-object of class data interval could not be converted to string
line number :-132
backtrace
c:\xampp\htcdocs\hr\application\controllers\attendance.php
function error handler
file c:\xampp\htcdocs\hr\index.php
line 322
Function_require_once

After submit the data it not auto-refresh to shows updated data, we need to manually refresh the page than it shows the updated data.

Hey Devnawjesh,

I am new at coding can please help me out to run this project.
I tried to run it but getting an internal server error. I did copy-paste code into xampp htdocs and change apache httpd.conf htdocs /foldername .
please help me out step by step installation.

thankyou

Hello,

I would like to report for some XSS vulnerabilities.

For example,

In file hr-payroll-master\application\controllers\Logistice.php

  public function Add_Assets_Category(){
      if($this->session->userdata('user_login_access') != False) {
      $id = $this->input->post('catid');
      $cattype = $this->input->post('cattype');
      $catname = $this->input->post('catname');
      $this->load->library('form_validation');
      $this->form_validation->set_error_delimiters();
      $this->form_validation->set_rules('catname', 'Category name', 'trim|required|min_length[1]|max_length[220]|xss_clean');

      //...
              $data = array(
                  'cat_name' => $catname,
                  'cat_status' => $cattype
              );
              $success = $this->logistic_model->Add_Assets_Category($data);
           //...          
      }
  //...    
}

We see that cat_name is validated against XSS but cat_status is not validated.
Then it will be saved in the DB, in file hr-payroll-master\application\models\Logistic_model.php

    public function Add_Assets_Category($data){
        $this->db->insert('assets_category',$data);
    }

Then in file

public function Assets_Category(){
    if($this->session->userdata('user_login_access') != False) {
        $data=array();
        $data['catvalue'] = $this->project_model->GetAssetsCategory();
        $this->load->view('backend/assets_category',$data);
    }
    //...     
}

In file hr-payroll-master\application\models\Project_model.php

    public function GetAssetsCategory(){
        $sql = "SELECT * FROM `assets_category`";
        $query=$this->db->query($sql);
        $result = $query->result();
		return $result;          
    } 

Finally cat_status is printed in the view 'backend/assets_category'.

<?php foreach($catvalue as $value): ?>
  <tr>
      <td><?php echo $value->cat_id; ?></td>
      <td><?php echo $value->cat_status ?></td>
      <td><?php echo $value->cat_name; ?></td>
      <td class="jsgrid-align-center ">
          <a href="" title="Edit" class="btn btn-sm btn-info waves-effect waves-light AssetsModal" data-id="<?php echo $value->cat_id; ?>"><i class="fa fa-pencil-square-o"></i></a>
      </td>
  </tr>
<?php endforeach; ?>

I see double slash in the url. For example: http://mysite.com//login or http://mysite.com//employee etc etc