Skip to content
Snippets Groups Projects
  1. Jul 03, 2013
  2. May 28, 2013
    • Jared Hancock's avatar
      Federate configuration settings · db81f071
      Jared Hancock authored
      Change the config table from a column-based table to a key-value table
      with namespacing. This allows several parts of osTicket to store their
      respective configurations in the same table without requiring database
      structure updates
      
      'namespace' is reserved in PHP
      db81f071
  3. Aug 28, 2012
  4. Jun 20, 2012
    • Jared Hancock's avatar
      Implement simple CSRF protection scheme · ff1d8b9e
      Jared Hancock authored
      Protect againts cross-site request forgery attacks by requiring a special
      form-field or header to be sent with requests that modify ticket system
      data.
      
      This meant a slight change to the AJAX ticket locking mechanism. It was
      defined to lock with a GET request; however, GET requests are defined as
      safe methods and should not modify backend data (such as a lock
      acquisition). Therefore, the the lock acquire AJAX method was changed to
      require a POST method.
      
      Also remove old, no-longer-used staff panel include files
      ff1d8b9e
  5. Mar 22, 2012
  6. Mar 19, 2012
Loading