Skip to content
Snippets Groups Projects
  1. Aug 19, 2018
    • Peter Rotich's avatar
      Make getFiles() return files · 75b515ad
      Peter Rotich authored
      This commit addresses the root cause of an issue commit 96892beb (now
              reverted) attempted to solve - by providing consistency between
      getFiles and getAttachments
      75b515ad
  2. Aug 16, 2018
    • JediKev's avatar
      issue: mPDF Arabic Fonts · 01c4dda2
      JediKev authored
      This addresses issue 4449 where using an Arabic language pack and trying to
      print a ticket returns a PDF with either squares for text or no text at all.
      01c4dda2
    • aydreeihn's avatar
      Relative Time Fixes: · c4ec9a09
      aydreeihn authored
      This commit removes the logic that was used for time within 2 days which would give a result of either today or tomorrow when something could actually be in 2 days instead.
      
      It also rounds relative time that is within 29 days so that the result will be more accurate.
      Ex: 1.99 will round to 2 instead of showing 1
      c4ec9a09
  3. Aug 14, 2018
  4. Aug 13, 2018
    • aydreeihn's avatar
      Task Assigned Team Issue: · 9c457af3
      aydreeihn authored
      This addresses an issue where it appeared as though tasks could not be assigned to teams if an agent in the team was not a part of the task's department. The assigment was actually taking place, however, it was not showing up in the Assignee column. Now the form will correctly display the column
      9c457af3
    • JediKev's avatar
      issue: Old Attachment Names · f179cf15
      JediKev authored
      This addresses an issue where uploading a file you’ve uploaded before but
      renamed is not saving the new name in the Attachment table.
      f179cf15
  5. Aug 08, 2018
    • JediKev's avatar
      issue: Wrong Attachment Names · b0b76170
      JediKev authored
      This addresses an issue where FileUploadFields are displaying the old names
      of existing files with new names.
      b0b76170
  6. Aug 06, 2018
  7. Aug 05, 2018
  8. Aug 03, 2018
    • JediKev's avatar
      issue: Custom File Upload Dropping · 14bcd42d
      JediKev authored
      This addresses issue 4155 where editing a ticket using a different session
      causes custom file uploads to drop from the ticket.
      14bcd42d
  9. Aug 01, 2018
    • JediKev's avatar
      issue: Deleted FieVld Thread Events · 9ab2317e
      JediKev authored
      This addresses an issue where deleting a field and all it's data will
      delete the form field record in the database causing all events containing
      the field to crash the ticket page.
      9ab2317e
    • JediKev's avatar
      issue: Priority Field Template Variable · 2433b8f9
      JediKev authored
      This addresses an issue with PriorityField Template Variables introduced
      with 4359 where the priority variable will appear as "Array" instead of the
      actual value. This adds an `asVar()` function to `class PriorityField` to
      get the appropriate data.
      2433b8f9
  10. Jul 31, 2018
    • JediKev's avatar
      issue: Client Side Thread Entries · e012bea1
      JediKev authored
      This addresses an issue where the client side thread entries are all grouped
      within the same div. This pushes all grouped entries to one side of the page
      making them illegible.
      e012bea1
  11. Jul 30, 2018
    • aydreeihn's avatar
      Web Portal Fixes: · 4decaeca
      aydreeihn authored
      - Add space between column headers and sort arrow
      - Fix sorting by 'Subject' column
      - Fix redactor issues with 'Reset' button
      	- Make sure text within redactor is cleared correctly
      	- Make sure we don't keep attachments if Reset
      - Make sure redactor is reinitialized where needed
      4decaeca
  12. Jul 24, 2018
    • JediKev's avatar
      issue: CLI Deploy Missing Bootstrap Fix · 2dacfde0
      JediKev authored
      This addresses an issue introduced with 4332 where the deploy CLI breaks
      upon deploying to an existing location. This checks to see if there is a
      bootstrap file in the destination first and if so it uses that one if not
      uses the source.
      2dacfde0
    • JediKev's avatar
      issue: Client Side Column Sorting · 1a92dcb1
      JediKev authored
      This addresses an issue where client side column sorting does not work at
      all. This is due to the if/else statement that checks for a REQUEST sort
      order and if the REQUEST sort order matches an `$orderWays` array value. The
      if statement returns TRUE for DESC and sets the sort order to DESC as it
      equals '-' (a dash) but ASC equals '' (an empty string) so it returns FALSE
      which fails-over to the else statement setting the sort order to DESC. In
      addition, this adds sorting icons the the column headers to make it more
      obvious they are sortable.
      1a92dcb1
  13. Jul 23, 2018
    • JediKev's avatar
      issue: ChoiceField Template Variable · 59ec7afc
      JediKev authored
      This addresses an issue on the forums where osTicket does not add the proper
      values to any custom choices field template variable. This adds an `asVar()`
      function to `class ChoiceField` so we can return the proper values for the
      template variables.
      59ec7afc
  14. Jul 20, 2018
    • JediKev's avatar
      issue: TextThreadEntryBody Sanitize · d8abe105
      JediKev authored
      This addresses an issue introduced with a3d896c8 where TextThreadEntryBodies
      are not keeping their new line characters causing the email format to appear
      wonky. This balances the entry and then htmlchars it to ensure no XSS.
      d8abe105
  15. Jul 17, 2018
    • JediKev's avatar
      issue: Orphaned File Query Rewrite · e5dd24e0
      JediKev authored
      This addresses an issue that was introduced by a previous attempt to
      address the orphaned file query. The previous attempt addressed the
      original issue but slowed database performance so this addresses the
      performance issue.
      e5dd24e0
    • JediKev's avatar
      department: Error Feedback · 9f3b6b27
      JediKev authored
      This addresses an issue where osTicket did not ensure associated items exist
      before saving to the database. This also addresses an issue where the Parent
      Topic error was not displayed on page.
      9f3b6b27
    • JediKev's avatar
      security: Fix Multiple XSS Vulnerabilies · 4b8ee133
      JediKev authored
      It may be possible to steal or manipulate customer session and cookies,
      which might be used to impersonate a legitimate user, allowing the hacker to
      view or alter user records, and to perform transactions as that user.
      Sanitation of hazardous characters was not performed correctly on user
      input.
      
      osTicket did not properly sanitize array values in `Format::htmlchars()`.
      Some values in the Admin Interface were not properly sanitized and returned
      to the response.
      4b8ee133
    • JediKev's avatar
      issue: Auto-Assignment Log · d4262cef
      JediKev authored
      This addresses an issue on the Forums where the Auto-Assignment Thread
      Event (configurable via Help Topic) uses the Email of the User rather than
      the User’s Name. This adds the correct function to retrieve the User’s
      Name if the User has an Account.
      d4262cef
    • JediKev's avatar
      issue: Ticket Lock On Disable · 606f45ba
      JediKev authored
      This addresses an issue where disabling Ticket Locks but setting a time
      for the Lock Timeout will always throw a "lock required" error. This adds
      a check to see if locks are enabled AND there is a time set. If locks are
      disabled it will not throw the error.
      606f45ba
    • JediKev's avatar
      issue: User Import No Email · b65185ba
      JediKev authored
      This addresses issue 4329 where you can import a User with no email
      address via CSV file. Once the User is added and you try to update them
      with an email address it fails due to no default email. This updates the
      check for email address from `!isset()` to `empty()` which will correctly
      check for empty string.
      b65185ba
    • JediKev's avatar
      issue: CLI Deploy Missing Bootstrap · ee208fca
      JediKev authored
      This addresses issue 4322 where deploying via CLI is missing
      `bootstrap.php`. This is due to the `get_include_dir()` function that
      tries to include a file from the destination which doesn’t exist yet,
      causing a fatal error. This updates the function to use `$this->source`
      instead of `$this->destination` to correctly find and include
      `bootstrap.php`.
      ee208fca
    • JediKev's avatar
      issue: Language Pack Locale Mismatch · 132d838f
      JediKev authored
      This addresses issue 4325 where the Language Pack Locales are mismatched.
      The Locale for the first language is displayed on the second language,
      etc. This updates the `$manifest` variable to be set before we display
      data so the correct `MANIFEST` file is included and all language data is
      displayed correctly.
      132d838f
  16. Jul 13, 2018
    • JediKev's avatar
      issue: Ticket Lock On Disable · 62f5962f
      JediKev authored
      This addresses an issue where disabling Ticket Locks but setting a time
      for the Lock Timeout will always throw a "lock required" error. This adds
      a check to see if locks are enabled AND there is a time set. If locks are
      disabled it will not throw the error.
      62f5962f
    • JediKev's avatar
      issue: User Import No Email · c8e2c3f1
      JediKev authored
      This addresses issue 4329 where you can import a User with no email
      address via CSV file. Once the User is added and you try to update them
      with an email address it fails due to no default email. This updates the
      check for email address from `!isset()` to `empty()` which will correctly
      check for empty string.
      c8e2c3f1
    • JediKev's avatar
      department: Error Feedback · d9beb14e
      JediKev authored
      This addresses an issue where osTicket did not ensure associated items exist
      before saving to the database. This also addresses an issue where the Parent
      Topic error was not displayed on page.
      d9beb14e
    • JediKev's avatar
      security: Fix Multiple XSS Vulnerabilies · a3d896c8
      JediKev authored
      It may be possible to steal or manipulate customer session and cookies,
      which might be used to impersonate a legitimate user, allowing the hacker to
      view or alter user records, and to perform transactions as that user.
      Sanitation of hazardous characters was not performed correctly on user
      input.
      
      osTicket did not properly sanitize array values in `Format::htmlchars()`.
      Some values in the Admin Interface were not properly sanitized and returned
      to the response.
      a3d896c8
  17. Jul 09, 2018
    • JediKev's avatar
      issue: CLI Deploy Missing Bootstrap · fd75eddf
      JediKev authored
      This addresses issue 4322 where deploying via CLI is missing
      `bootstrap.php`. This is due to the `get_include_dir()` function that
      tries to include a file from the destination which doesn’t exist yet,
      causing a fatal error. This updates the function to use `$this->source`
      instead of `$this->destination` to correctly find and include
      `bootstrap.php`.
      fd75eddf
  18. Jul 03, 2018
    • JediKev's avatar
      issue: Language Pack Locale Mismatch · a87f19d3
      JediKev authored
      This addresses issue 4325 where the Language Pack Locales are mismatched.
      The Locale for the first language is displayed on the second language,
      etc. This updates the `$manifest` variable to be set before we display
      data so the correct `MANIFEST` file is included and all language data is
      displayed correctly.
      a87f19d3
  19. Jun 07, 2018
    • JediKev's avatar
      issue: Auto-Assignment Log · e4329513
      JediKev authored
      This addresses an issue on the Forums where the Auto-Assignment Thread
      Event (configurable via Help Topic) uses the Email of the User rather than
      the User’s Name. This adds the correct function to retrieve the User’s
      Name if the User has an Account.
      e4329513
  20. May 15, 2018
    • Peter Rotich's avatar
      Lint: Lint fixes · 914b6e64
      Peter Rotich authored
      914b6e64
    • JediKev's avatar
      issue: Section Break Hint · d60779e8
      JediKev authored
      This addresses an issue where the Help Text for Section Break fields does
      not display custom Redactor styling correctly. Instead of displaying the
      properly formatted Redactor content with it's styling it displays the
      entire html for the Redactor content. This was due to the format method
      used for the Section Break Field's Help Text. This updates the method from
      `Format::htmlchars()` to `Format::display()` which displays the properly
      formatted content. The content is also sanitized by `Format::sanitize()`
      before saving to the database to avoid any chance of XSS.
      d60779e8
    • Jared Hancock's avatar
      queryset: Fix circular reference error · e657a33e
      Jared Hancock authored
      This fixes an error where the ModelInstanceManager maintained a reference to
      the QuerySet instance, and the QuerySet instance managed a reference to the
      ModelInstanceManager instance (if it's the iterator for the query). Because
      of the circular reference, if the iterator is not exhausted, then the
      resource is not closed and the query remains open. This wastes memory and
      prevents some other queries from running after such a situation happens.
      
      This addresses the issue by removing the circular reference between the
      QuerySet and the ModelInstanceManager.
      e657a33e
    • Mat Whitney's avatar
      Check permissions before displaying Close Task · f62e9669
      Mat Whitney authored
      Don't display the Close Task option if the current user can't close it...
      f62e9669
    • JediKev's avatar
      format: Fix Vimeo iFrames · ae9a9cc9
      JediKev authored
      This addresses an issue where some Vimeo videos are not being sent in
      Agent’s responses. This adds `player.vimeo` to the sanitize method’s
      iframe section so that the iframe tag is not stripped.
      ae9a9cc9
Loading