Hi everyone,
I am facing a vulnerability inside the the hrms mobile app (sitename/hrms). when an employee checks in or out the time written into the database is their device time, e.g someone setting his device to pst but we are actually on gmt so the check in time takes his device’s time not the time set in the database settings. now this imposes a problem because employees could simply change their local time and avoid lateness etc… I am aware that there is an option to disable the check in on mobile from hr settings but I think it is a good option if it just takes time from the database not from the user device.
