HelpDesk v1.63

Feature Request...

If you're interested in requesting a feature please use the form on this page:
http://www.hackvb.com/helpdesk.php

Description:
This is a ticket support system. Your members can now open up tickets rather than email you all the time.

Features

• No File Edits!
• Ability to turn the HelpDesk off.
• Ability to turn the New Ticket option off.
• Automated Response to users when tickets are submitted by email or private message.
• Ability to select which usergroups have access to creating Departments and managing the other usergroup's HelpDesk settings.
• Departments / Ticket Categories.
• Limit usergroups to handle certain department tickets.
• Limit usergroups by the following actions: new tickets, edit tickets, delete tickets, resolve / unresolve tickets, claim/unclaim ownership of tickets.
• New Tickets since last visit to forums.
• New Replies since last visit to forums.
• Unresolved / Resolved Tickets.
• WYSIWYG Editor for replies.

No File Edits!
When upgrading your forums there will be no problems. This will not give you any headaches because it almost runs separate of vBulletin..

1 Template Modification
This only has one template modification and that is to the navbar if you want a link there.

How-tos:
Giving Access to the Departments and Usergroup Settings
Usergroup Settings
Managing Departments

Installed?
Please click install if you install so you get notifications of all the latest bug fixes and feature addons.


Bug Fixes / Feature Additions:
v1.00 - Initial Release
v1.01 - Added template caching for a slight performance increase. Thanks to: princeton
v1.02 - Install script updated to create databases with table prefixes. Also added the ability to select which usergroups have access to the administer options.
v1.03 - Uninstall section added to the install script.
v1.50 - Ton of features added. Will update this with a link to the post where I named all the features added.
v1.51 - Bug fix. This fixes the problem with sending PMs for the auto responder.
v1.52 - Bug fix. This fixes the problem where the creator of tickets cannot reply to the ticket and a cosmetic fix to the installer.
v1.53 - Bug fixes. Fixes the problem with the PM pop-up, database errors for some people and the delete errors.
v1.54 - Bug fixes. Fixes the problem with the install script with one table.
v1.55 - Bug fixes. Fixes the problem with the Usergroup Settings page loading half the way down the page in IE.
v1.60 - Bug fixes. Fixes the security hole pointed out by xYarub. This also adds the send a new PM on ticket update feature.
v1.61 - Bug fixes.
v1.62 - Parse error fix.
v1.63 - Really fixed the permission errors.

Donations:
Hacks like these takes up enormous amounts of time and energy. This hack is entirely free to use. Please help me, help the vBulletin community by donating. Donations will keep me releasing hacks for free rather than doing custom work. A donation of any amount is much appreciated! Tell me this hack isn't work a couple bucks?

[WhSox21]

Very odd. Let me look into this.

[evenmonkeys]

Find anything out yet? =\

[TheMusicMan]

Originally Posted by xYarub

Find anything out yet? =\

Hey WhSox21

Superb hack matey... spot on.

I appreciate you have a hard time managing all the feature requests when they are posted in here, but is there any way you might be able to either post the updated feature request list here, or perhaps create a page on your site where we could see the list...? Maybe even with a status on each feature i.e. if you're thinking of implementing it, if so, progress etc...

Again, I think it is fair to say that everyone here very much appreciates the great work you have done on the Helpdesk system. Thank you for your tolerance, patience and skill...

John

[Tom1234]

WhSox21,

Can you confirm the ability for others to view tickets they shouldn't have access to or do you need more information? Sounds like a pretty major bug that needs plugging ASAP.

[MikeWarner]

Tom - I have PMed him a screen shot of me doing this to his own forum - he is acting on it but is busy at the moment. He has PMed me to let me know that there will be a fix soon. I'm sure WhSox21 will sort it out as soon as he has a moment.

[Lostnode]

Originally Posted by WhSox21

Very odd. Let me look into this.

Any chance the fixes are complete. I dunno if you have heard this from "Deaths" (original post - https://vborg.vbsupport.ru/showthrea...light=helpdesk)

Originally Posted by Deaths

I strongly _NOT_ recommend this hack, as it has some _SERIOUS_ security issues! (https://vborg.vbsupport.ru/showpost....&postcount=451 as an example)

He says he'll fix it, but this would be the second fix for the same bug, and I don't think he'll every be able to patch it.

PS I've found more than 5 security exploits, 4 of them each a different way of looking at other tickets, and 1 is an SQL injection.

SQL Injections are pretty bad, I have had a few of my sites compromised becasue of this. I am very interested your script for my hosting site, but wish not to have to deal with security holes. Any truths to this? And if Death hasn;t contacted you with his finds, message him, he should have reported them to you so you could fix them (if they do indeed exist that is)

[WhSox21]

Deaths may be mad because his helpdesk hack was removed from here. But yes, I just looked and there are a few SQL injection problems, but only a few! These will be fixed tomorrow with the other bug. I've just finished my exams this week and have a little bit more free time.

I'm sorry for the lack of updates guys.

[WhSox21]

I just spent a few hours on this and I've got the problems sorted out. Deaths has not contacted me about the problems, but I don't see any other possible problems.

Let me know how this update works out!

[Deaths]

I'll take a look at the current code, and let you know if I find any more problems

[WhSox21]

I have also added the ability to view the requests via this page:
http://www.hackvb.com/helpdesk.php

Just click on the link in the top left.