Skip to content
Snippets Groups Projects
  1. Nov 01, 2013
  2. Oct 31, 2013
    • Jared Hancock's avatar
      Fix parsing issue in strtotime() · b9ab14c1
      Jared Hancock authored
      PHP can't discern the difference between d/m/Y and m/d/Y when just the date
      is submitted to strtotime(). Unfortunately, strptime() is not available
      until PHP 5.1.0. This patch forces datepickers to change their values to
      YYYY-MM-DD upon submission to disambiguate parsing issues.
      
      Fixes #832
      b9ab14c1
  3. Oct 30, 2013
    • Jared Hancock's avatar
      Use system date format for datepicker · ad9935b1
      Jared Hancock authored
      Previously the American date format (m/d/Y) was used exclusively for
      formatting dates in the datepicker widget. This patch enables the widget to
      be formatted based on the format set in the admin panel.
      
      Fixes #829
      ad9935b1
  4. Oct 09, 2013
    • Jared Hancock's avatar
      f7384359
    • Jared Hancock's avatar
      Dynamic data for osTicket · 9e75169e
      Jared Hancock authored
      *This is a major redesign / rework of the osTicket base*
      
      This patch drops the concept of static ticket metadata and allows for an
      admin-configurable arbitrary data that is attachable to tickets
      
      The system is architected such that the base osTicket install now comes with
      a "default" form that has fields for subject, name, email, and phone number.
      This form is editable to allow for the addition of arbitrary other fields;
      however, the basic fields must remain in order to be associated with a
      help-topic and attached to a ticket.
      
      This concept can be expanded to allow for arbitrary data associated with
      registered clients or ticket thread items.
      
      Forms are comprised of sections. Sections have a title and instructions
      properties and a list of fields. Fields have various implementations to
      represent different data such as text, long answer, phone number, datetime,
      yes/no, and selections, and are configurable to define the look and feel and
      interpretation of the respective form field.
      
      Dropdown lists are represented as "Dynamic Lists", which are
      admin-configurable lists of items. Dropdowns can be optionally represented
      as Bootstrap typeahead fields.
      
      This also adds the start of a simple ORM which will hopefully be expanded in
      the future to support multiple database platforms. Currently, only MySQL is
      implemented.
      9e75169e
    • Jared Hancock's avatar
      Fix canned response injection · 4c7173d2
      Jared Hancock authored
      4c7173d2
    • Jared Hancock's avatar
      HTML ticket thread, inline images and draft support · 864d3539
      Jared Hancock authored
      Process inline attachments in thread entry and support inline images in
      piped emails
      
      Support inline images across the system, with draft support
      
      Migrate to a single attachment table
          That way we don't need a new table for everything we need to attach an
          inline image to (like a signature, for instance)
      
      Add richtext support for internal notes
      
      Implement images on site pages
      
      * Image paste in Redactor
      * Make non-local images optional
      * Placeholder for non-local images
      * Fix local image download hover
      * Don't re-attach inline images
      864d3539
  5. Jul 24, 2013
  6. Jul 17, 2013
  7. Feb 28, 2013
  8. Feb 22, 2013
  9. Feb 20, 2013
  10. Dec 14, 2012
  11. Oct 29, 2012
  12. Oct 28, 2012
  13. Oct 08, 2012
  14. Jul 25, 2012
  15. Jul 23, 2012
  16. Jul 20, 2012
  17. Jul 09, 2012
  18. Jun 20, 2012
    • Jared Hancock's avatar
      Implement simple CSRF protection scheme · ff1d8b9e
      Jared Hancock authored
      Protect againts cross-site request forgery attacks by requiring a special
      form-field or header to be sent with requests that modify ticket system
      data.
      
      This meant a slight change to the AJAX ticket locking mechanism. It was
      defined to lock with a GET request; however, GET requests are defined as
      safe methods and should not modify backend data (such as a lock
      acquisition). Therefore, the the lock acquire AJAX method was changed to
      require a POST method.
      
      Also remove old, no-longer-used staff panel include files
      ff1d8b9e
  19. Apr 29, 2012
  20. Apr 27, 2012
  21. Apr 22, 2012
  22. Apr 09, 2012
  23. Apr 01, 2012
  24. Mar 30, 2012
  25. Mar 26, 2012
  26. Mar 19, 2012
Loading