UptoSign 2.5.0: enhanced security and Dolibarr 24 compatibility

Fixed vulnerabilities

Several screens accepted actions without verifying Dolibarr’s security token: a simple malicious link could delete a procedure, add recipients to an envelope, or modify its filters. Each action now requires the correct permission and a valid token.

Other fixes close an SQL injection in procedure searches, code injections via category or third-party labels, and the ability to send a file for signing that does not belong to the document. Only the current document’s PDF is sent to UptoSign, including when signing is initiated by another module.

API key and signatory data protected

• the UptoSign API key is now only sent to a server with a verified certificate, and never to a redirect host;
• the account password is no longer redisplayed in the setup page;
• emails, mobile numbers, names, and signature links are no longer written to the Dolibarr log at the default level, nor in the browser console.

Billed only once

Restarting a procedure on a PDF that already has one in progress is rejected: signatories no longer receive two SMS messages, and the service is no longer billed twice. A new user no longer receives the right to initiate signatures by default, as they are billed.

Dolibarr 24 and PostgreSQL

Dolibarr 24 removes the crabe invoice template in favor of sponge. The module now installs its settings for sponge, octopus, eratosthene, and zenith, and no longer tests templates from disabled modules. It installs and updates on PostgreSQL.

Bulk signing and deletions

• an envelope receives its final reference upon its first sending;
• a new tab adds third parties and their contacts based on criteria;
• deleting a document from any module, or an envelope, cancels its ongoing signatures at UptoSign;
• deleting a user retains their signed HR documents, which serve as proof.

Update

After replacing the module folder, disable and re-enable it, then grant the "Create and modify signature lists" permission to users who prepare envelopes: it replaces the launch right on these screens.

Prerequisites

Dolibarr 18 or higher, PHP 7.4 or higher.