Merge branch 'release/1.7-dpr2'

WHATSNEW.md

+New stuff in 1.7-dpr2
+======================
+
+Features
+--------
+  * Autocomplete for ticket search box (emails and ticket numbers typeahead)
+  * Redesigned staff login page
+  * Warning when leaving unsaved changes in admin and staff settings pages
+  * Auto change admin settings pages when selecting a new page from the
+    drop-down list
+  * Create a ticket in one click from the staff panel
+  * Preview ticket from the search results
+  * Export tickets to CSV file
+
+Issues
+------
+  * (#1) Automatically cleanup orphaned attachments
+  * (#2) Reject ticket creation when a matching email filter has
+         'Reject email' set
+  * (#3) Ticket search results are properly paginated
+  * (#4) Make email filters editable
+  * (#5) Add .htaccess for API URLs rewrites
+  * (#6) Add utf-8 content type declaration for installer HTML output
+  * (#8) Fix installer for PHP settings with 'register_globals' enabled
+
+Outstanding
+-----------
+  * Implement the dashboard reports
+  * Advanced search form for ticket searches
+  * Multi-file upload for responses, notes, and new tickets
+  * PDF export for ticket thread
+  * Misc. improvements
+
+New Features in 1.7
+===================
+Version 1.7 includes several new features
+
+Email Filters
+-------------
+As an upgrade from email banning (which is still supported), email filters
+allow for matching incoming email in the subject line and message body. For
+matching emails, the administrator has the ability to automatically route
+tickets:
+
+  * To a specific department, staff member, and/or team
+  * Automatically assign ticket priority and/or service-level-agreement
+  * Disable ticket auto-responses
+
+Canned Attachments
+------------------
+Attach files to your canned responses. These attachments are automatically
+attached to the ticket thread along with the canned response. The
+attachments are not duplicated in the database and therefore use virtually
+no space.
+
+Service Level Agreements
+------------------------
+Service level agreements allow for a configurable grace period based on the
+department or help topic associated with the ticket. A default SLA is
+provided, and a due date can be set to override the grace period of the SLA
+for a ticket.
+
+Client-side Knowledgebase
+-------------------------
+Manage a searchable help document portal for your users
+
+API
+---
+Interface with osTicket via HTTP requests. Starting with version 1.7,
+tickets are createable by submitting an HTTP POST request to either
+
+    /api/tickets.xml
+    /api/tickets.json

api/.htaccess

+Options +FollowSymLinks
+RewriteEngine On
+
+RewriteBase /api/
+
+RewriteCond %{REQUEST_FILENAME} !-f
+RewriteCond %{REQUEST_FILENAME} !-d
+
+RewriteRule ^(.*)$ http.php/$1 [L]

assets/default/css/theme.css

@@ -495,7 +495,7 @@ body {
 #ticketForm div.error label, #clientLogin div.error label {
   color: #a00;
 }
-#ticketForm p, #clientLogin p {
+#clientLogin p {
   clear: both;
   text-align: center;
 }
@@ -646,7 +646,7 @@ a.refresh {
 #ticketThread table th {
   text-align: left;
   border-bottom: 1px solid #aaa;
-  font-size: 11pt;
+  font-size: 12px;
   padding: 5px;
 }
 #ticketThread table td {
@@ -659,7 +659,7 @@ a.refresh {
   background: #ddd;
 }
 #ticketThread .info {
-  padding: 5px;
+  padding: 2px;
   background: #f9f9f9;
   border-top: 1px solid #ddd;
   height: 16px;
@@ -667,16 +667,13 @@ a.refresh {
 }
 #ticketThread .info a {
   display: inline-block;
-  margin: 5px 20px 5px 0;
+  margin: 5px 10px 5px 0;
   padding-left: 24px;
   height: 16px;
   line-height: 16px;
   background-position: 0 50%;
   background-repeat: no-repeat;
 }
-#ticketThread .info .pdf {
-  background-image: url('../images/filetypes/pdf.png?1319636863');
-}
 
 #reply {
   margin-top: 20px;

attachment.php

+<?php
+/*********************************************************************
+    attachment.php
+
+    Attachments interface for clients.
+    Clients should never see the dir paths.
+    
+    Peter Rotich <peter@osticket.com>
+    Copyright (c)  2006-2012 osTicket
+    http://www.osticket.com
+
+    Released under the GNU General Public License WITHOUT ANY WARRANTY.
+    See LICENSE.TXT for details.
+
+    vim: expandtab sw=4 ts=4 sts=4:
+**********************************************************************/
+require('secure.inc.php');
+require_once(INCLUDE_DIR.'class.attachment.php');
+//Basic checks
+if(!$thisclient 
+        || !$_GET['id'] 
+        || !$_GET['h']
+        || !($attachment=Attachment::lookup($_GET['id']))
+        || !($file=$attachment->getFile()))
+    die('Unknown attachment!');
+
+//Validate session access hash - we want to make sure the link is FRESH! and the user has access to the parent ticket!!
+$vhash=md5($attachment->getFileId().session_id().$file->getHash());
+if(strcasecmp(trim($_GET['h']),$vhash) 
+        || !($ticket=$attachment->getTicket()) 
+        || !$ticket->checkClientAccess($thisclient)) 
+    die('Unknown or invalid attachment');
+//Download the file..
+$file->download();
+
+?>

captcha.php

+<?php
+/*********************************************************************
+    captcha.php
+
+    Simply returns captcha image.
+    
+    Peter Rotich <peter@osticket.com>
+    Copyright (c)  2006-2012 osTicket
+    http://www.osticket.com
+
+    Released under the GNU General Public License WITHOUT ANY WARRANTY.
+    See LICENSE.TXT for details.
+
+    vim: expandtab sw=4 ts=4 sts=4:
+**********************************************************************/
+require_once('main.inc.php');
+require(INCLUDE_DIR.'class.captcha.php');
+$captcha = new Captcha(5,12,ROOT_DIR.'images/captcha/');
+echo $captcha->getImage();
+?>

client.inc.php

@@ -51,7 +51,7 @@ require_once(INCLUDE_DIR.'class.dept.php');
 //clear some vars
 $errors=array();
 $msg='';
-$thisclient=null;
+$thisclient=$nav=null;
 //Make sure the user is valid..before doing anything else.
 if($_SESSION['_client']['userID'] && $_SESSION['_client']['key'])
     $thisclient = new ClientSession($_SESSION['_client']['userID'],$_SESSION['_client']['key']);
@@ -60,6 +60,8 @@ if($_SESSION['_client']['userID'] && $_SESSION['_client']['key'])
 if($thisclient && $thisclient->getId() && $thisclient->isValid()){
      $thisclient->refreshSession();
 }
+/* Client specific defaults */
+define('PAGE_LIMIT',DEFAULT_PAGE_LIMIT);
 
 $nav = new UserNav($thisclient, 'home');
 ?>