Skip to content
Snippets Groups Projects
  1. Nov 21, 2013
  2. Oct 09, 2013
    • Jared Hancock's avatar
      HTML ticket thread, inline images and draft support · 864d3539
      Jared Hancock authored
      Process inline attachments in thread entry and support inline images in
      piped emails
      
      Support inline images across the system, with draft support
      
      Migrate to a single attachment table
          That way we don't need a new table for everything we need to attach an
          inline image to (like a signature, for instance)
      
      Add richtext support for internal notes
      
      Implement images on site pages
      
      * Image paste in Redactor
      * Make non-local images optional
      * Placeholder for non-local images
      * Fix local image download hover
      * Don't re-attach inline images
      864d3539
  3. Aug 22, 2013
  4. Jul 11, 2013
    • Jared Hancock's avatar
      Allow generation and serving of abritrary custom pages · d309b99b
      Jared Hancock authored
      The administrator can define pages in the admin panel defined as type
      'other', and when set to active, those pages can be served from the
      /pages/<page-name-slug> URL from the base of the helpdesk.
      
      This is mocked up only against Apache
      d309b99b
  5. Jul 03, 2013
  6. Jun 20, 2012
    • Jared Hancock's avatar
      Implement simple CSRF protection scheme · ff1d8b9e
      Jared Hancock authored
      Protect againts cross-site request forgery attacks by requiring a special
      form-field or header to be sent with requests that modify ticket system
      data.
      
      This meant a slight change to the AJAX ticket locking mechanism. It was
      defined to lock with a GET request; however, GET requests are defined as
      safe methods and should not modify backend data (such as a lock
      acquisition). Therefore, the the lock acquire AJAX method was changed to
      require a POST method.
      
      Also remove old, no-longer-used staff panel include files
      ff1d8b9e
  7. Apr 21, 2012
    • Jared Hancock's avatar
      Add lint test for (calls to) undefined functions · cd4b4faa
      Jared Hancock authored
      And correct several undefined function errors from several source files. So
      while function names in PHP are considered case-insensitive, it still makes
      sense to use consistent camel casing for both defining and calling methods.
      The lint test searches the code base for method calls, and then searches the
      code base again looking for a function definition matching the name of the
      function invoked. It's not failsafe, because it doesn't detect the class
      from which the method should belong, so it's likely to have false negatives.
      Furthermore, it won't work well for PHP 5 where several classes are built
      into PHP (and aren't searchable in the osTicket code base).
      
      Remove the include/staff/api.inc.php as it no longer appears to be used (and
      contains references to undefined methods).
      cd4b4faa
  8. Mar 19, 2012
Loading