Very odd. Let me look into this.

Find anything out yet? =\

Hey WhSox21

Superb hack matey... spot on.

I appreciate you have a hard time managing all the feature requests when they are posted in here, but is there any way you might be able to either post the updated feature request list here, or perhaps create a page on your site where we could see the list...? Maybe even with a status on each feature i.e. if you're thinking of implementing it, if so, progress etc...

Again, I think it is fair to say that everyone here very much appreciates the great work you have done on the Helpdesk system. Thank you for your tolerance, patience and skill...

John

WhSox21,

Can you confirm the ability for others to view tickets they shouldn't have access to or do you need more information? Sounds like a pretty major bug that needs plugging ASAP.

Tom - I have PMed him a screen shot of me doing this to his own forum - he is acting on it but is busy at the moment. He has PMed me to let me know that there will be a fix soon. I'm sure WhSox21 will sort it out as soon as he has a moment.

Any chance the fixes are complete. I dunno if you have heard this from "Deaths" (original post - https://vborg.vbsupport.ru/showthrea...light=helpdesk)

SQL Injections are pretty bad, I have had a few of my sites compromised becasue of this. I am very interested your script for my hosting site, but wish not to have to deal with security holes. Any truths to this? And if Death hasn;t contacted you with his finds, message him, he should have reported them to you so you could fix them (if they do indeed exist that is)

Deaths may be mad because his helpdesk hack was removed from here. But yes, I just looked and there are a few SQL injection problems, but only a few! These will be fixed tomorrow with the other bug. I've just finished my exams this week and have a little bit more free time.

I'm sorry for the lack of updates guys.

I just spent a few hours on this and I've got the problems sorted out. Deaths has not contacted me about the problems, but I don't see any other possible problems.

Let me know how this update works out!

I'll take a look at the current code, and let you know if I find any more problems :)

I have also added the ability to view the requests via this page:
http://www.hackvb.com/helpdesk.php

Just click on the link in the top left.