| - | - | - |
|---|---|---|
| '; - echo ' | '; - echo ' | '; - echo ' |
| - | - - | -- - | -
| - | - |
|---|---|
| '; - echo ' | '; - echo ' |
| - | - - | -
'.$hesklang['click_login'].''); - } else { - return false; - } - } - } - - /* Admins have full access to all features, besides possibly settings */ - if ($_SESSION['isadmin']) - { - return true; - } - - /* Check other staff for permissions */ - if (strpos($_SESSION['heskprivileges'], $feature) === false) - { - if ($showerror) - { - hesk_error($hesklang['no_permission'].'
'.$hesklang['click_login'].'');
- }
- else
- {
- return false;
- }
- }
- else
- {
- return true;
- }
-
-} // END hesk_checkPermission()
diff --git a/inc/email_functions.inc.php b/inc/email_functions.inc.php
index a347a0a1..9470d819 100644
--- a/inc/email_functions.inc.php
+++ b/inc/email_functions.inc.php
@@ -241,9 +241,6 @@ function hesk_validEmails()
// --> New ticket submitted
'new_ticket' => $hesklang['ticket_received'],
- // --> Ticket closed
- 'ticket_closed' => $hesklang['ticket_closed'],
-
// --> Verify email
'verify_email' => $hesklang['verify_email'],
@@ -268,9 +265,6 @@ function hesk_validEmails()
// --> New note by someone to a ticket assigned to you
'new_note' => $hesklang['new_note'],
- // --> Assigned ticket reopened
- 'ticket_reopen_assigned' => $hesklang['ticket_reopen_assigned'],
-
);
} // END hesk_validEmails()
diff --git a/inc/header.inc.php b/inc/header.inc.php
index c4c64c30..6f440217 100644
--- a/inc/header.inc.php
+++ b/inc/header.inc.php
@@ -35,10 +35,6 @@
/* Check if this is a valid include */
if (!defined('IN_SCRIPT')) {die('Invalid attempt');}
require(HESK_PATH . 'modsForHesk_settings.inc.php');
-// Check to see if we're in maintenance mode before sending anything to the DOM
-if ($modsForHesk_settings['maintenance_mode'] && !defined('ON_MAINTENANCE_PAGE') && !defined('ON_LOGIN_PAGE')) {
- header('Location: '.HESK_PATH.'maintenance.php');
-}
?>
diff --git a/inc/pipe_functions.inc.php b/inc/pipe_functions.inc.php
deleted file mode 100755
index cf4e7016..00000000
--- a/inc/pipe_functions.inc.php
+++ /dev/null
@@ -1,505 +0,0 @@
-num_rows > 0) {
- return hesk_cleanExit();
- }
-
- // Process "From:" name, convert to UTF-8, set to "[Customer]" if not set
- $tmpvar['name'] = isset($results['from'][0]['name']) ? $results['from'][0]['name'] : $hesklang['pde'];
- if ( ! empty($results['from'][0]['encoding']) )
- {
- $tmpvar['name'] = hesk_encodeUTF8($tmpvar['name'], $results['from'][0]['encoding']);
- }
- $tmpvar['name'] = hesk_input($tmpvar['name'],'','',1,50) or $tmpvar['name'] = $hesklang['pde'];
-
- // Process "To:" email (not yet implemented, for future use)
- // $tmpvar['to_email'] = hesk_validateEmail($results['to'][0]['address'],'ERR',0);
-
- // Process email subject, convert to UTF-8, set to "[Piped email]" if none set
- $tmpvar['subject'] = isset($results['subject']) ? $results['subject'] : $hesklang['pem'];
- if ( ! empty($results['subject_encoding']) )
- {
- $tmpvar['subject'] = hesk_encodeUTF8($tmpvar['subject'], $results['subject_encoding']);
- }
- $tmpvar['subject'] = hesk_input($tmpvar['subject'],'','',1,70) or $tmpvar['subject'] = $hesklang['pem'];
-
- // Process email message, convert to UTF-8
- $tmpvar['message'] = isset($results['message']) ? $results['message'] : '';
- if ( ! empty($results['encoding']) )
- {
- $tmpvar['message'] = hesk_encodeUTF8($tmpvar['message'], $results['encoding']);
- }
- $tmpvar['message'] = hesk_input($tmpvar['message'],'','',1);
-
- // Message missing? We require it!
- if ( ! $tmpvar['message'])
- {
- return hesk_cleanExit();
- }
-
- // Strip quoted reply from email
- $tmpvar['message'] = hesk_stripQuotedText($tmpvar['message']);
-
- // Convert URLs to links, change newlines to
- $tmpvar['message'] = hesk_makeURL($tmpvar['message']);
- $tmpvar['message'] = nl2br($tmpvar['message']);
-
- # For debugging purposes
- # die( bin2hex($tmpvar['message']) );
- # die($tmpvar['message']);
-
- // Try to detect "delivery failed" and "noreply" emails - ignore if detected
- if ( hesk_isReturnedEmail($tmpvar) )
- {
- return hesk_cleanExit();
- }
-
- // Check for email loops
- if ( hesk_isEmailLoop($tmpvar['email'], md5($tmpvar['message']) ) )
- {
- return hesk_cleanExit();
- }
-
- // OK, everything seems OK. Now determine if this is a reply to a ticket or a new ticket
- if ( preg_match('/\[#([A-Z0-9]{3}\-[A-Z0-9]{3}\-[A-Z0-9]{4})\]/', str_replace(' ', '', $tmpvar['subject']), $matches) )
- {
- // We found a possible tracking ID
- $tmpvar['trackid'] = $matches[1];
-
- // Does it match one in the database?
- $res = hesk_dbQuery("SELECT * FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."tickets` WHERE `trackid`='".hesk_dbEscape($tmpvar['trackid'])."' LIMIT 1");
- if (hesk_dbNumRows($res))
- {
- $ticket = hesk_dbFetchAssoc($res);
-
- // Do email addresses match?
- if ( strpos( strtolower($ticket['email']), strtolower($tmpvar['email']) ) === false )
- {
- $tmpvar['trackid'] = '';
- }
-
- // Is this ticket locked? Force create a new one if it is
- if ($ticket['locked'])
- {
- $tmpvar['trackid'] = '';
- }
- }
- else
- {
- $tmpvar['trackid'] = '';
- }
- }
-
- // If tracking ID is empty, generate a new one
- if ( empty($tmpvar['trackid']) )
- {
- $tmpvar['trackid'] = hesk_createID();
- $is_reply = 0;
- }
- else
- {
- $is_reply = 1;
- }
-
- // Process attachments
- $tmpvar['attachmment_notices'] = '';
- $tmpvar['attachments'] = '';
- $num = 0;
- if ($hesk_settings['attachments']['use'] && isset($results['attachments'][0]))
- {
- #print_r($results['attachments']);
-
- foreach ($results['attachments'] as $k => $v)
- {
-
- // Clean attachment names
- $myatt['real_name'] = hesk_cleanFileName($v['orig_name']);
-
- // Check number of attachments, delete any over max number
- if ($num >= $hesk_settings['attachments']['max_number'])
- {
- $tmpvar['attachmment_notices'] .= sprintf($hesklang['attnum'], $myatt['real_name']) . "\n";
- continue;
- }
-
- // Check file extension
- $ext = strtolower(strrchr($myatt['real_name'], "."));
- if (!in_array($ext,$hesk_settings['attachments']['allowed_types']))
- {
- $tmpvar['attachmment_notices'] .= sprintf($hesklang['atttyp'], $myatt['real_name']) . "\n";
- continue;
- }
-
- // Check file size
- $myatt['size'] = $v['size'];
- if ($myatt['size'] > ($hesk_settings['attachments']['max_size']))
- {
- $tmpvar['attachmment_notices'] .= sprintf($hesklang['attsiz'], $myatt['real_name']) . "\n";
- continue;
- }
-
- // Generate a random file name
- $useChars='AEUYBDGHJLMNPQRSTVWXZ123456789';
- $tmp = $useChars{mt_rand(0,29)};
- for($j=1;$j<10;$j++)
- {
- $tmp .= $useChars{mt_rand(0,29)};
- }
- $myatt['saved_name'] = substr($tmpvar['trackid'] . '_' . md5($tmp . $myatt['real_name']), 0, 200) . $ext;
-
- // Rename the temporary file
- rename($v['stored_name'],HESK_PATH.$hesk_settings['attach_dir'].'/'.$myatt['saved_name']);
-
- // Insert into database
- hesk_dbQuery("INSERT INTO `".hesk_dbEscape($hesk_settings['db_pfix'])."attachments` (`ticket_id`,`saved_name`,`real_name`,`size`) VALUES ('".hesk_dbEscape($tmpvar['trackid'])."','".hesk_dbEscape($myatt['saved_name'])."','".hesk_dbEscape($myatt['real_name'])."','".intval($myatt['size'])."')");
- $tmpvar['attachments'] .= hesk_dbInsertID() . '#' . $myatt['real_name'] .',';
-
- $num++;
- }
-
- if (strlen($tmpvar['attachmment_notices']))
- {
- $tmpvar['message'] .= "
" . hesk_input($hesklang['attrem'],'','',1) . "
" . nl2br(hesk_input($tmpvar['attachmment_notices'],'','',1));
- }
- }
-
- // Delete the temporary files
- deleteAll($results['tempdir']);
-
- // If this is a reply add a new reply
- if ($is_reply)
- {
- // Set last replier name to customer name
- $ticket['lastreplier'] = ($tmpvar['name'] == $hesklang['pde']) ? $tmpvar['email'] : $tmpvar['name'];;
-
- // If staff hasn't replied yet, keep ticket status "New", otherwise set it to "Waiting reply from staff"
- $ticket['status'] = $ticket['status'] ? 1 : 0;
-
- // Update ticket as necessary
- hesk_dbQuery("UPDATE `".hesk_dbEscape($hesk_settings['db_pfix'])."tickets` SET `lastchange`=NOW(),`status`='{$ticket['status']}',`lastreplier`='0' WHERE `id`='".intval($ticket['id'])."' LIMIT 1");
-
- // Insert reply into database
- hesk_dbQuery("INSERT INTO `".hesk_dbEscape($hesk_settings['db_pfix'])."replies` (`replyto`,`name`,`message`,`dt`,`attachments`) VALUES ('".intval($ticket['id'])."','".hesk_dbEscape($ticket['lastreplier'])."','".hesk_dbEscape($tmpvar['message'])."',NOW(),'".hesk_dbEscape($tmpvar['attachments'])."')");
-
- // --> Prepare reply message
-
- // 1. Generate the array with ticket info that can be used in emails
- $info = array(
- 'email' => $ticket['email'],
- 'category' => $ticket['category'],
- 'priority' => $ticket['priority'],
- 'owner' => $ticket['owner'],
- 'trackid' => $ticket['trackid'],
- 'status' => $ticket['status'],
- 'name' => $ticket['name'],
- 'lastreplier' => $ticket['lastreplier'],
- 'subject' => $ticket['subject'],
- 'message' => stripslashes($tmpvar['message']),
- 'attachments' => $tmpvar['attachments'],
- 'dt' => hesk_date($ticket['dt'], true),
- 'lastchange' => hesk_date($ticket['lastchange'], true),
- );
-
- // 2. Add custom fields to the array
- foreach ($hesk_settings['custom_fields'] as $k => $v)
- {
- $info[$k] = $v['use'] ? $ticket[$k] : '';
- }
-
- // 3. Make sure all values are properly formatted for email
- $ticket = hesk_ticketToPlain($info, 1, 0);
-
- // --> Process custom fields before sending
- foreach ($hesk_settings['custom_fields'] as $k => $v)
- {
- $ticket[$k] = $v['use'] ? hesk_msgToPlain($ticket[$k], 1) : '';
- }
-
- // --> If ticket is assigned just notify the owner
- if ($ticket['owner'])
- {
- hesk_notifyAssignedStaff(false, 'new_reply_by_customer', 'notify_reply_my');
- }
- // --> No owner assigned, find and notify appropriate staff
- else
- {
- hesk_notifyStaff('new_reply_by_customer',"`notify_reply_unassigned`='1'");
- }
-
- return $ticket['trackid'];
-
- } // END REPLY
-
- // Not a reply, but a new ticket. Add it to the database
- $tmpvar['category'] = 1;
- $tmpvar['priority'] = 3;
- $_SERVER['REMOTE_ADDR'] = $hesklang['unknown'];
-
- // Auto assign tickets if aplicable
- $tmpvar['owner'] = 0;
- $tmpvar['history'] = $pop3 ? sprintf($hesklang['thist16'], hesk_date()) : sprintf($hesklang['thist11'], hesk_date());
-
- $autoassign_owner = hesk_autoAssignTicket($tmpvar['category']);
-
- #print_r($autoassign_owner);
-
- if ($autoassign_owner)
- {
- $tmpvar['owner'] = $autoassign_owner['id'];
- $tmpvar['history'] .= sprintf($hesklang['thist10'],hesk_date(),$autoassign_owner['name'].' ('.$autoassign_owner['user'].')');
- }
-
- // Custom fields will be empty as there is no reliable way of detecting them
- foreach ($hesk_settings['custom_fields'] as $k=>$v)
- {
- $tmpvar[$k] = '';
- }
-
- // Insert ticket to database
- $ticket = hesk_newTicket($tmpvar);
-
- // Notify the customer
- hesk_notifyCustomer();
-
- // Need to notify staff?
- // --> From autoassign?
- if ($tmpvar['owner'] && $autoassign_owner['notify_assigned'])
- {
- hesk_notifyAssignedStaff($autoassign_owner, 'ticket_assigned_to_you');
- }
- // --> No autoassign, find and notify appropriate staff
- elseif ( ! $tmpvar['owner'] )
- {
- hesk_notifyStaff('new_ticket_staff', " `notify_new_unassigned` = '1' ");
- }
-
- return $ticket['trackid'];
-} // END hesk_email2ticket()
-
-
-function hesk_encodeUTF8($in, $encoding)
-{
- $encoding = strtoupper($encoding);
-
- switch($encoding)
- {
- case 'UTF-8':
- return $in;
- break;
- case 'ISO-8859-1':
- return utf8_encode($in);
- break;
- default:
- return iconv($encoding, 'UTF-8', $in);
- break;
- }
-} // END hesk_encodeUTF8()
-
-
-function hesk_stripQuotedText($message)
-{
- global $hesk_settings, $hesklang;
-
- // Stripping quoted text disabled?
- if ( ! $hesk_settings['strip_quoted'])
- {
- return $message;
- }
-
- // Loop through available languages and ty to find the tag
- foreach ($hesk_settings['languages'] as $language => $settings)
- {
- if ( ($found = strpos($message, $settings['hr']) ) !== false )
- {
- // "Reply above this line" tag found, strip quoted reply
- $message = substr($message, 0, $found);
- $message .= "\n" . $hesklang['qrr'];
-
- // Set language to the detected language
- hesk_setLanguage($language);
- break;
- }
- }
-
- return $message;
-} // END hesk_stripQuotedText()
-
-
-function hesk_isReturnedEmail($tmpvar)
-{
- // Check noreply email addresses
- if ( preg_match('/not?[\-_]reply@/i', $tmpvar['email']) )
- {
- return true;
- }
-
- // Check mailer daemon email addresses
- if ( preg_match('/mail(er)?[\-_]daemon@/i', $tmpvar['email']) )
- {
- return true;
- }
-
- // Check autoreply subjects
- if ( preg_match('/^[\[\(]?Auto(mat(ic|ed))?[ \-]?reply/i', $tmpvar['subject']) )
- {
- return true;
- }
-
- // Check out of office subjects
- if ( preg_match('/^Out of Office/i', $tmpvar['subject']) )
- {
- return true;
- }
-
- // Check delivery failed email subjects
- if (
- preg_match('/DELIVERY FAILURE/i', $tmpvar['subject']) ||
- preg_match('/Undelivered Mail Returned to Sender/i', $tmpvar['subject']) ||
- preg_match('/Delivery Status Notification \(Failure\)/i', $tmpvar['subject']) ||
- preg_match('/Returned mail\: see transcript for details/i', $tmpvar['subject'])
- )
- {
- return true;
- }
-
- // Check Mail Delivery sender name
- if ( preg_match('/Mail[ \-_]?Delivery/i', $tmpvar['name']) )
- {
- return true;
- }
-
- // Check Delivery failed message
- if ( preg_match('/postmaster@/i', $tmpvar['email']) && preg_match('/Delivery has failed to these recipients/i', $tmpvar['message']) )
- {
- return true;
- }
-
- // No pattern detected, seems like this is not a returned email
- return false;
-
-} // END hesk_isReturnedEmail()
-
-
-function hesk_isEmailLoop($email, $message_hash)
-{
- global $hesk_settings, $hesklang, $hesk_db_link;
-
- // If $hesk_settings['loop_hits'] is set to 0 this function is disabled
- if ( ! $hesk_settings['loop_hits'])
- {
- return false;
- }
-
- // Escape wildcards in email
- $email_like = hesk_dbEscape(hesk_dbLike($email));
-
- // Delete expired DB entries
- hesk_dbQuery("DELETE FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."pipe_loops` WHERE `dt` < (NOW() - INTERVAL ".intval($hesk_settings['loop_time'])." SECOND) ");
-
- // Check current entry
- $res = hesk_dbQuery("SELECT `hits`, `message_hash` FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."pipe_loops` WHERE `email` LIKE '{$email_like}' LIMIT 1");
-
- // Any active entry*
- if (hesk_dbNumRows($res))
- {
- list($num, $md5) = hesk_dbFetchRow($res);
-
- $num++;
-
- // Number of emails in a time period reached?
- if ($num >= $hesk_settings['loop_hits'])
- {
- return true;
- }
-
- // Message exactly the same as in previous email?
- if ($message_hash == $md5)
- {
- return true;
- }
-
- // Update DB entry
- hesk_dbQuery("UPDATE `".hesk_dbEscape($hesk_settings['db_pfix'])."pipe_loops` SET `hits` = `hits` + 1, `message_hash` = '".hesk_dbEscape($message_hash)."' WHERE `email` LIKE '{$email_like}' LIMIT 1");
- }
- else
- {
- // First instance, insert a new database row
- hesk_dbQuery("INSERT INTO `".hesk_dbEscape($hesk_settings['db_pfix'])."pipe_loops` (`email`, `message_hash`) VALUES ('".hesk_dbEscape($email)."', '".hesk_dbEscape($message_hash)."')");
- }
-
- // No loop rule trigered
- return false;
-
-} // END hesk_isEmailLoop()
-
-
-function hesk_cleanExit()
-{
- global $results;
-
- // Delete the temporary files
- deleteAll($results['tempdir']);
-
- // Return NULL
- return NULL;
-} // END hesk_cleanExit()
diff --git a/inc/prepare_ticket_search.inc.php b/inc/prepare_ticket_search.inc.php
deleted file mode 100644
index 92383f4a..00000000
--- a/inc/prepare_ticket_search.inc.php
+++ /dev/null
@@ -1,177 +0,0 @@
- 0) ? $tmp : $hesk_settings['max_listings'];
-
-$tmp = intval( hesk_GET('page', 1) );
-$page = ($tmp > 1) ? $tmp : 1;
-
-/* Acceptable $sort values and default asc(1)/desc(0) setting */
-$sort_possible = array(
-'trackid' => 1,
-'lastchange' => 0,
-'name' => 1,
-'subject' => 1,
-'status' => 1,
-'lastreplier' => 1,
-'priority' => 1,
-'category' => 1,
-'dt' => 0,
-'id' => 1,
-'owner' => 1,
-'custom1' => 1,
-'custom2' => 1,
-'custom3' => 1,
-'custom4' => 1,
-'custom5' => 1,
-'custom6' => 1,
-'custom7' => 1,
-'custom8' => 1,
-'custom9' => 1,
-'custom10' => 1,
-'custom11' => 1,
-'custom12' => 1,
-'custom13' => 1,
-'custom14' => 1,
-'custom15' => 1,
-'custom16' => 1,
-'custom17' => 1,
-'custom18' => 1,
-'custom19' => 1,
-'custom20' => 1
-);
-
-/* These values should have collate appended in SQL */
-$sort_collation = array(
-'name',
-'subject',
-);
-
-/* Acceptable $group values and default asc(1)/desc(0) setting */
-$group_possible = array(
-'owner' => 1,
-'priority' => 1,
-'category' => 1,
-);
-
-/* Start the order by part of the SQL query */
-$sql .= " ORDER BY ";
-
-/* Group tickets? Default: no */
-if (isset($_GET['g']) && ! is_array($_GET['g']) && isset($group_possible[$_GET['g']]))
-{
- $group = hesk_input($_GET['g']);
-
- if ($group == 'priority' && isset($_GET['sort']) && ! is_array($_GET['sort']) && $_GET['sort'] == 'priority')
- {
- // No need to group by priority if we are already sorting by priority
- }
- elseif ($group == 'owner')
- {
- // If group by owner place own tickets on top
- $sql .= " CASE WHEN `owner` = '".intval($_SESSION['id'])."' THEN 1 ELSE 0 END DESC, `owner` ASC, ";
- }
- else
- {
- $sql .= ' `'.hesk_dbEscape($group).'` ';
- $sql .= $group_possible[$group] ? 'ASC, ' : 'DESC, ';
- }
-}
-else
-{
- $group = '';
-}
-
-
-/* Show critical tickets always on top? Default: yes */
-$cot = (isset($_GET['cot']) && intval($_GET['cot']) == 1) ? 1 : 0;
-if (!$cot)
-{
- $sql .= " CASE WHEN `priority` = '0' THEN 1 ELSE 0 END DESC , ";
-}
-
-/* Sort by which field? */
-if (isset($_GET['sort']) && ! is_array($_GET['sort']) && isset($sort_possible[$_GET['sort']]))
-{
- $sort = hesk_input($_GET['sort']);
-
- $sql .= $sort == 'lastreplier' ? " CASE WHEN `lastreplier` = '0' THEN 0 ELSE 1 END DESC, COALESCE(`replierid`, NULLIF(`lastreplier`, '0'), `name`) " : ' `'.hesk_dbEscape($sort).'` ';
-
- // Need to set MySQL collation?
- if ( in_array($_GET['sort'], $sort_collation) )
- {
- $sql .= " COLLATE '" . hesk_dbEscape($hesklang['_COLLATE']) . "' ";
- }
-}
-else
-{
- /* Default sorting by ticket status */
- $sql .= ' `status` ';
- $sort = 'status';
-}
-
-/* Ascending or Descending? */
-if (isset($_GET['asc']) && intval($_GET['asc'])==0)
-{
- $sql .= ' DESC ';
- $asc = 0;
- $asc_rev = 1;
-
- $sort_possible[$sort] = 1;
-}
-else
-{
- $sql .= ' ASC ';
- $asc = 1;
- $asc_rev = 0;
- if (!isset($_GET['asc']))
- {
- $is_default = 1;
- }
-
- $sort_possible[$sort] = 0;
-}
-
-/* In the end same results should always be sorted by priority */
-if ($sort != 'priority')
-{
- $sql .= ' , `priority` ASC ';
-}
-
-# Uncomment for debugging purposes
-# echo "SQL: $sql
";
diff --git a/inc/ticket_list.inc.php b/inc/ticket_list.inc.php
index a01d82fc..32c32b8e 100644
--- a/inc/ticket_list.inc.php
+++ b/inc/ticket_list.inc.php
@@ -324,32 +324,18 @@ if ($total > 0)
$ticket['archive'] = !($ticket['archive']) ? $hesklang['no'] : $hesklang['yes'];
$ticket['message'] = $first_line . substr(strip_tags($ticket['message']),0,200).'...';
- $ownerColumn = $ticket['owner'] != 0 ? $admins[$ticket['owner']] : '('.$hesklang['unas'].')';
-
- $customFieldsHtml = '';
- for ($i = 1; $i <= 20; $i++) {
- if ($hesk_settings['custom_fields']['custom'.$i]['use']) {
- $display = 'display: none';
- if ((isset($_GET['sort']) && $_GET['sort'] == 'custom'.$i) || (isset($_GET['what']) && $_GET['what'] == 'custom'.$i)) {
- $display = '';
- }
- $customFieldsHtml .= '
- -- - |