Skip to content
Snippets Groups Projects
  1. May 13, 2018
  2. Apr 25, 2018
    • JediKev's avatar
      issue: Files - deleteOrphans() · a3e04e82
      JediKev authored
      This addresses the issue where files were being deleted before being sent
      out in Agent responses. This was due to a bug in the query that gets the
      orphaned files. This query was getting files created within the last 24
      hours not after the last 24 hours. The query also had another bug that
      would use the time from PHP instead of MySQL which could cause issues.
      This updates the query as per @greezybacon's suggestions to delete
      orphaned files that were created more than 24 hours ago.
      a3e04e82
  3. Apr 09, 2018
    • JediKev's avatar
      upgrader: Flush Cache On Upgrade · fe34bb24
      JediKev authored
      This addresses an issue where the Upgrader will sometimes use an outdated
      cached object and throw an error. This adds a the function to clear the
      Model Cache every time the Upgrader runs an Upgrade Patch to get fresh
      objects.
      fe34bb24
  4. Apr 02, 2018
    • JediKev's avatar
      issue: Org. User Account Status · beb6cad5
      JediKev authored
      This addresses an issue where the User’s account status is always 'Active'
      in the Organization list no matter what their actual status is. This adds the
      account status to the user query which adds the correct status to the Users’
      account.
      beb6cad5
  5. Mar 26, 2018
    • JediKev's avatar
      issue: Outlook _MailEndCompose · fad881ed
      JediKev authored
      This addresses an issue where Outlook adds weird (and seemingly random)
      _MailEndCompose tags to the email body which turns unwanted content into
      links. This adds the _MailEndCompose tag to Format::sanitize() so it
      will be removed from the email body.
      fad881ed
  6. Sep 14, 2017
    • Peter Rotich's avatar
      Form data XSS · bcd58e88
      Peter Rotich authored
      Encode html entities of cached form data
      bcd58e88
    • Peter Rotich's avatar
      CVE-2017-14396 · 1eaa6910
      Peter Rotich authored
      This commit addresses an SQL injection vulnerability in ORM lookup
      function.
      
      * ORM implementation failed to properly quote fields, used in SQL
      statements, that might originate from unsanitized user input.
      
      * AttachmentFile lookup allowed for key based SQL injection by blindly
      delegating non-string lookup to ORM.
      1eaa6910
  7. Aug 10, 2017
  8. Aug 08, 2017
    • JediKev's avatar
      tasks: Fix Task Updated Time · d6dfa7a6
      JediKev authored
      This addresses an issue where updating a Task does not change the
      `updated` column in the database. This adds a line to change the `update`
      column when updating a Task.
      d6dfa7a6
  9. Jul 28, 2017
    • JediKev's avatar
      oops: Fix Task Print · 2ddf78a6
      JediKev authored
      This addresses issue 3782 where clicking Print on a Task gives you a blank
      popup that hangs. This is because the Print button was being treated as a
      Task action when it is actually not one. This adds a ternary operator to
      give the proper Task Actions the `task-action` class and gives the Print
      button no class.
      2ddf78a6
  10. Jul 21, 2017
    • JediKev's avatar
      oops: User Phone Search · 00e47272
      JediKev authored
      This addresses issue 3815 where searching by User's phone number doesn't
      work in v1.10. This adds phone number search capabilities for the User
      Directory and User Search popup in v1.10.
      00e47272
  11. Jul 19, 2017
    • JediKev's avatar
      cron: Delete Expired Sessions · 5a8fdeae
      JediKev authored
      This addresses an issue where expired sessions would not be removed from
      the database. This caused the session table to fill up and create
      unnecessary issues. This adds a cleanup method to remove all expired
      sessions from the database.
      5a8fdeae
  12. May 12, 2017
    • JediKev's avatar
      forms: Proper Field Deletion · ad34072c
      JediKev authored
      This addresses issue where upon deletion of a form field and all its
      entry values, the field record wouldn't be deleted from the `form_field`
      table. This links another issue where you can't delete a list if its
      been a field before. This is due to the list delete() function that
      checks for list field records in the `form_field` table.
      ad34072c
  13. Apr 24, 2017
    • Peter Rotich's avatar
      Add timezone setting to DateTimeField with time. · 06e348dd
      Peter Rotich authored
      This is necessary to force a particular timezone on a DateTimeField entry.
      If timezone is not set then user's timezone is assumed.
      06e348dd
    • Peter Rotich's avatar
      DateTime · 69b85f0d
      Peter Rotich authored
      Address edge cases where timezone mixups happens on DateTimeField
      
      Allow datetime field to be timezone agnostic (not timezone aware) to display
      the timezone used to set the field. The timezone of the last user or agent
      that edited the field is used.
      69b85f0d
  14. Apr 10, 2017
  15. Mar 31, 2017
  16. Mar 17, 2017
  17. Feb 24, 2017
  18. Feb 21, 2017
  19. Feb 07, 2017
  20. Feb 06, 2017
    • JediKev's avatar
      Fixes typo · 11663e3b
      JediKev authored
      Changes 'Permisions' to the correct spelling 'Permissions'.
      11663e3b
  21. Jan 17, 2017
  22. Dec 16, 2016
  23. Nov 03, 2016
  24. Nov 02, 2016
    • jdelhome3578's avatar
      Loading Overlay · a80d9ed6
      jdelhome3578 authored
      Display Loading Overlay when posting a response or a note to a ticket.
      a80d9ed6
    • Kevin Thorne's avatar
      List Item Abbreviation · 8513f137
      Kevin Thorne authored
      Can not update list item abbreviation because update() method is
      expecting 'abbrev' key so this corrects the key.
      8513f137
  25. Nov 01, 2016
    • Peter Rotich's avatar
      Add Trusted Proxies and LAN Options · 4396f91c
      Peter Rotich authored
      * HTTP Option: TRUSTED_PROXIES (default: <none>
      To support running osTicket installation on a web servers that sit behind a
      load balancer, HTTP cache, or other intermediary (reverse) proxy; it's
      necessary to define trusted proxies to protect against forged http headers.
      
      * HTTP Option: LOCAL_NETWORKS (default: 127.0.0.0/24)
      When running osTicket as part of a cluster it might become necessary to
      white list local/virtual networks that can bypass some authentication
      checks.
      
      * Validate CLIENT_IP to make sure it's a valid IP address.
      4396f91c
    • Peter Rotich's avatar
      XSS: Encode Helpdesk name/title · 2fb47bd8
      Peter Rotich authored
      Encode html chars on helpdesk title
      2fb47bd8
    • Peter Rotich's avatar
      fixes: Minor bug fixes · 4634d213
      Peter Rotich authored
      4634d213
    • Peter Rotich's avatar
      Task Due Date Time · c7ffd5e7
      Peter Rotich authored
      Defer to agent's timezone on due date `datetime` selection instead of
      defaulting to GMT.
      c7ffd5e7
    • Peter Rotich's avatar
      Ticket Filter Memory Leak · 84f085de
      Peter Rotich authored
      Fix case where filter applying 'Use Reply-To Email' filter action
      triggers a reprocessing loop that exhausts php memory.
      84f085de
  26. Oct 25, 2016
  27. Oct 24, 2016
    • Peter Rotich's avatar
      Passive Email Threading · f25679ac
      Peter Rotich authored
      Add support for threading email conversations happening outside the system.
      Autoresponders are paused when threading is on passive mode. Alerts may
      still go out to agents as configured.
      f25679ac
    • Peter Rotich's avatar
      Agent Sorting · 5c548c7a
      Peter Rotich authored
      Account for agents' name format setting when sorting agents.
      5c548c7a
Loading