- Sep 20, 2013
-
-
Peter Rotich authored
Fix email address comparison issue Reviewed-By:
Peter Rotich <peter@osticket.com>
-
Jared Hancock authored
When comparing the From address of incoming email. If the ticket owner sent an email back into the system and the email address did not match exactly, case-wise, the email would not be considered from the ticket owner.
-
Jared Hancock authored
Fix bug detecting emails from system email addresses Reviewed-With: Peter Rotich <peter@osticket.com>
-
Jared Hancock authored
-
- Sep 18, 2013
-
-
Peter Rotich authored
Show correct description for template edits Reviewed-By:
Peter Rotich <peter@osticket.com>
-
Jared Hancock authored
-
Peter Rotich authored
Fix ROOT_PATH detection on Windows Reviewed-By:
Peter Rotich <peter@osticket.com>
-
Peter Rotich authored
Avoid double-encoding thread titles Reviewed-By:
Peter Rotich <peter@osticket.com>
-
Peter Rotich authored
Fixes cookie domain specification Reviewed-By:
Peter Rotich <peter@osticket.com>
-
Jared Hancock authored
Also converts ROOT_DIR detection to always use forward slashes. And it fixes the removal of the leading double-backslash on Windows UNC names (fixes #649)
-
- Sep 13, 2013
-
-
Jared Hancock authored
This is safe now, because the title is appropriately encoded in class.thread.php/ThreadEntry::create() Fixes #567, #718
-
Jared Hancock authored
if the domain given in HTTP_HOST variable happens to have a port specification. Technically, the port specification should not be included in the domain spec given in the cookie. (And for the record, that makes no sense to me, seeing as a cookie would otherwise be valid for all servers on any ports at a particular domain).
-
- Sep 12, 2013
-
-
Jared Hancock authored
The previous implementation did not work correctly for symlinked folders. The new approach uses debug_backtrace() and ROOT_DIR to determine the difference between ROOT_DIR and the osTicket installation path. This thing is like a turd that won't flush
-
- Sep 11, 2013
-
-
Jared Hancock authored
-
Jared Hancock authored
-
Peter Rotich authored
Forbid message loops for alert messages Reviewed-By:
Peter Rotich <peter@osticket.com>
-
Peter Rotich authored
Turn off display_errors for releases Reviewed-By:
Peter Rotich <peter@osticket.com>
-
Jared Hancock authored
Add random string generator to Crypto Reviewed-By:
Jared Hancock <jared@osticket.com>
-
Jared Hancock authored
-
Peter Rotich authored
and restarts PHP SESSION
-
Jared Hancock authored
Remove "Howdy" as the salutation - no sense of humor in this world! Reviewed-By:
Jared Hancock <jared@osticket.com>
-
Jared Hancock authored
Feature/root path revisited -- hopefully this issue will die here Reviewed-By:
Jared Hancock <jared@osticket.com>
-
Jared Hancock authored
-
Peter Rotich authored
Also, allow for the administrator to manually define the ROOT_PATH in the config file (the very last mile).
-
Jared Hancock authored
-
- Sep 09, 2013
-
-
Jared Hancock authored
If an alert message manages to loop back into the ticketing system, refuse posting to the ticket thread. Technically, the message should be marked as an auto-response message; however, auto-response messages should usually be allowed to be appended to the ticket thread. This patch will check if the From email header cites an email address that is a system email address (visible in the Emails section of the Admin Panel). If it is, the email is completely ignored.
-
Peter Rotich authored
-
- Sep 06, 2013
-
-
Jared Hancock authored
-
Jared Hancock authored
Conflicts: include/class.misc.php
-
Peter Rotich authored
Fix cookie domain for localhost Reviewed-By:
Peter Rotich <peter@osticket.com>
-
Peter Rotich authored
Fetch attachments in mail fetch Reviewed-By:
Peter Rotich <peter@osticket.com>
-
Peter Rotich authored
Provide a fallback ROOT_PATH Reviewed-By:
Peter Rotich <peter@osticket.com>
-
Jared Hancock authored
Web browsers don't appreciate a cookie domain without any dots. This patch detects the originally-requested domain for the request. If the domain does not contain dots (such as 'localhost' or the name of a local server on your network defined in your hosts file), no cookie domain is sent. The greatest symptom of this issue what the illustrious 'Invalid CSRF token' seen repeatedly on the scp login page. The reason is that the browser was rejecting the cookie from the server. Fixes #677, #672, #653
-
Jared Hancock authored
This code was lost when the message-id tracking feature was implemented
-
Jared Hancock authored
Web browsers don't appreciate a cookie domain without any dots. This patch detects the originally-requested domain for the request. If the domain does not contain dots (such as 'localhost' or the name of a local server on your network defined in your hosts file), no cookie domain is sent. The greatest symptom of this issue what the illustrious 'Invalid CSRF token' seen repeatedly on the scp login page. The reason is that the browser was rejecting the cookie from the server. Fixes #677, #672, #653
-
Jared Hancock authored
If unable to detect the root path, provide a fallback ROOT_PATH setting to './'. This is likely to happen if run from the commandline (like for crons) or if DOCUMENT_ROOT and the folder of main.inc.php seem to have nothing in common Fixes #704
-
Jared Hancock authored
-
- Sep 05, 2013
-
-
Jared Hancock authored
-
Jared Hancock authored
-
Peter Rotich authored
Fixup for the message-id tracking feature Reviewed-By:
Peter Rotich <peter@osticket.com>
-