Skip to content
Snippets Groups Projects
  1. Jun 21, 2012
    • Jared Hancock's avatar
      Remove SQL injection vulnerabilities · 70aca893
      Jared Hancock authored
      Map each of the inputs from $_POST['ids'] into a separate, sanitized
      database input (via the db_input() function), then implode() the array with
      commas and build the SQL statement.
      70aca893
  2. Jun 18, 2012
  3. Jun 14, 2012
  4. Jun 12, 2012
    • Jared Hancock's avatar
      Next iteration of the reports · fe2be7bd
      Jared Hancock authored
      Most things work, still outstanding
        - the table needs to support filtering like the graphs,
        - the bootstrap.css file needs to be culled of what isn't used for now,
        - g.raphael needs to be re-minned after a issue is filed with g.raphael
          for the snapEnds() function not picking reasonable graph axes.
        - split dashboard.php into several smaller js, css, etc., respective files
      fe2be7bd
  5. Jun 04, 2012
  6. May 27, 2012
  7. May 13, 2012
  8. May 10, 2012
  9. May 01, 2012
  10. Apr 29, 2012
  11. Apr 28, 2012
  12. Apr 27, 2012
  13. Apr 23, 2012
  14. Apr 22, 2012
  15. Apr 21, 2012
    • Jared Hancock's avatar
      Add lint test for (calls to) undefined functions · cd4b4faa
      Jared Hancock authored
      And correct several undefined function errors from several source files. So
      while function names in PHP are considered case-insensitive, it still makes
      sense to use consistent camel casing for both defining and calling methods.
      The lint test searches the code base for method calls, and then searches the
      code base again looking for a function definition matching the name of the
      function invoked. It's not failsafe, because it doesn't detect the class
      from which the method should belong, so it's likely to have false negatives.
      Furthermore, it won't work well for PHP 5 where several classes are built
      into PHP (and aren't searchable in the osTicket code base).
      
      Remove the include/staff/api.inc.php as it no longer appears to be used (and
      contains references to undefined methods).
      cd4b4faa
  16. Apr 20, 2012
  17. Apr 19, 2012
  18. Apr 13, 2012
  19. Apr 09, 2012
  20. Apr 01, 2012
  21. Mar 30, 2012
  22. Mar 28, 2012
  23. Mar 27, 2012
    • Jared Hancock's avatar
      Add export support for ticket search page · cc7f20b9
      Jared Hancock authored
      Adds a link to the scp/tickets.php page (Tickets) allowing for the export of
      the data to CSV file. This is preliminary and still needs a few items:
        * An icon + button CSS definition
        * Support for alternate columns (staff assigned, etc.)
      
      Also add beginnings of complex export support (PDF, JSON  and other
      formats
      to follow). CSV is fully supported for now.
      
      And for brevity, add a Http::download method to allow for consistent and
      browser-independent forced page content downloads
      cc7f20b9
  24. Mar 26, 2012
Loading