- May 10, 2019
-
-
Peter Rotich authored
Conflicts: include/class.dynamic_forms.php include/class.mailparse.php include/client/open.inc.php include/staff/templates/user-lookup.tmpl.php setup/test/tests/stubs.php
-
Peter Rotich authored
cli: Package Better Wording
-
- May 09, 2019
-
-
Peter Rotich authored
FAQ Issues
-
Peter Rotich authored
cli: Package No File Permissions
-
Peter Rotich authored
oops: .eml/.msg Missing Not Operator
-
Peter Rotich authored
Lint Fixes
-
JediKev authored
This updates the variable name that determines if the current PHP version is 5.6+ from `$php56` to `$php56plus`. This will help other understand better what the variable is/does.
-
- Apr 29, 2019
-
-
JediKev authored
This addresses a typo where we are missing a not operator in class MailFetcher when checking for no `$body` in the fetched attachments. This adds the not operator so that the `if()` statement is properly executed and we correctly set a fake body when there is none.
-
- Apr 25, 2019
-
-
JediKev authored
This addresses an issue where the `package` cli module is leaving out the permissions on files. This causes the final ZIP archive to contain files without permissions meaning the files are un-usable until you restore permissions. This can make life difficult on people trying to install osTicket with minimal knowledge as they wouldn’t know what is wrong. This is due to the `setExternalAttributesName` method not shifting 16 bits on the file "mode" which will not translate to binary. The file "mode" is the inode protection mode for a file returned by the `stat()` method. It is essentially a decimal representation of a file's permissions. Since "mode" is in decimal format we need to shift by 16 bits to translate it to binary so the archiver understands. Once the mode is translated to binary the permissions are preserved.
-
aydreeihn authored
This commit gets rid of PHP warnings. Additionally, it updates the lint tests to be more accurate.
-
- Apr 24, 2019
-
-
Peter Rotich authored
Conflicts: WHATSNEW.md include/client/header.inc.php
-
Peter Rotich authored
-
JediKev authored
This updates jQuery to the latest stable release of v3.4.0.
-
Peter Rotich authored
-
Peter Rotich authored
xss: XSS To LFI Vulnerability
-
JediKev authored
This addresses a vulnerability found by [AkkuS CW](https://pentest.com.tr) where a simple XSS attempt can lead to an LFI (Local File Inclusion) attack. The issue stems from the system returning the unformatted file contents in an error message when uploading a CSV to the User Importer. This formats the contents before uploading so that if the contents are returned in an error message they will not be executed by the browser which therefore prevents XSS attempts and the possibility of an LFI attack. This also formats all the user-created data sent to ImportError to prevent the same issue.
-
- Apr 23, 2019
-
-
Peter Rotich authored
-
Peter Rotich authored
-
Peter Rotich authored
-
Peter Rotich authored
issue: .eml/.msg Attachments
-
Peter Rotich authored
Ticket Link: Always return a link
-
Peter Rotich authored
Mailer: Allow for ability to pass -f option as from_address
-
- Apr 22, 2019
-
-
Peter Rotich authored
-
Peter Rotich authored
-
Peter Rotich authored
Bug fixes and enhancements for v1.11
-
Peter Rotich authored
issue: Task EstDueDate
-
aydreeihn authored
-
JediKev authored
This addresses an issue where having the `%{task.due_date}` variable in a Task alert template whilst creating a Task with an Assignee causes a fatal error in the backend leaving the Create Task modal spinning forever. This is due to the `getVar()` method for Tasks where the `due_date` case references a non-existing method. This updates the referenced method to an existing method so it gets the correct value and does not cause a fatal error.
-
- Apr 18, 2019
-
-
Peter Rotich authored
jquery: Update Again
-
Peter Rotich authored
Issues since v1.11 release
-
Peter Rotich authored
Mime Decode - Encoded chars
-
Peter Rotich authored
PJAX: Increase default timeout
-
Peter Rotich authored
MPDF Tasks
-
- Apr 17, 2019
-
-
JediKev authored
This updates jQuery to the latest stable release of v3.4.0.
-
JediKev authored
This addresses an issue where `.eml` and `.msg` files on incoming mails are being dropped. This is due the the mail fetcher that tries to process `.eml`/`.msg` files and adds them as thread entries rather than adding them as attachments. This adds a new section that utilizes a new method to fetch the body of `.eml`/`.msg` files, fetches the subjects of the `.eml`/`.msg` files as the attachment names, and creates attachments. This preserves the `.eml` and `.msg` files and adds them to the pertinent thread entries as attachments.
-
aydreeihn authored
Conflicts: include/class.pdf.php
-
aydreeihn authored
Use the psize that is set in the options array since $psize is not in the Task2PDF contructor.
-
Peter Rotich authored
-
Peter Rotich authored
Increase default pjax timeout to 30 seconds to avoid double requests & reloads.
-
Peter Rotich authored
-