From e2d3eb92ac374d6ef0ab036648880343c126c892 Mon Sep 17 00:00:00 2001
From: Mike Koch <mkoch227@gmail.com>
Date: Thu, 9 Apr 2015 16:13:15 -0400
Subject: [PATCH] #157 Enforce closable on the customer-side ticket page

---
 ticket.php | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/ticket.php b/ticket.php
index af8a582d..069d8e14 100644
--- a/ticket.php
+++ b/ticket.php
@@ -264,9 +264,17 @@ require_once(HESK_PATH . 'inc/header.inc.php');
                     <p><?php echo $hesklang['last_update']; ?>: <?php echo hesk_date($ticket['lastchange'], true); ?></p>
                 </div>
                 <div class="col-md-2 col-md-offset-4 col-sm-12 close-ticket">
-                    <p><?php $random=rand(10000,99999);
-                        if ($ticket['isClosed'] == true && $ticket['locked'] != 1 && $hesk_settings['custopen']) {echo '<a href="change_status.php?track='.$trackingID.$hesk_settings['e_query'].'&amp;s=2&amp;Refresh='.$random.'&amp;token='.hesk_token_echo(0).'" title="'.$hesklang['open_action'].'">'.$hesklang['open_action'].'</a>';}
-                        elseif ($hesk_settings['custclose']) {echo '<a href="change_status.php?track='.$trackingID.$hesk_settings['e_query'].'&amp;s=3&amp;Refresh='.$random.'&amp;token='.hesk_token_echo(0).'" title="'.$hesklang['close_action'].'">'.$hesklang['close_action'].'</a>';} ?></p>
+                    <p><?php
+                        $statusRS = hesk_dbQuery('SELECT `Closable` FROM `'.hesk_dbEscape($hesk_settings['db_pfix']).'statuses` WHERE `ID` = '.intval($ticket['status']));
+                        $status = hesk_dbFetchAssoc($statusRS);
+                        $isClosable = $status['Closable'] == 'yes' || $status['Closable'] == 'conly';
+                        $random=rand(10000,99999);
+                        if ($ticket['isClosed'] == true && $ticket['locked'] != 1 && $hesk_settings['custopen']) {
+                            echo '<a href="change_status.php?track='.$trackingID.$hesk_settings['e_query'].'&amp;s=2&amp;Refresh='.$random.'&amp;token='.hesk_token_echo(0).'" title="'.$hesklang['open_action'].'">'.$hesklang['open_action'].'</a>';
+                        }
+                        elseif ($hesk_settings['custclose'] && $isClosable) {
+                            echo '<a href="change_status.php?track='.$trackingID.$hesk_settings['e_query'].'&amp;s=3&amp;Refresh='.$random.'&amp;token='.hesk_token_echo(0).'" title="'.$hesklang['close_action'].'">'.$hesklang['close_action'].'</a>';
+                        } ?></p>
                 </div>
             </div>
             <div class="row medLowPriority">