Issues

Port HelpDesk to web2project 5.0

web2project/modules-helpdesk#44 · opened

on Oct 23, 2026

Release as a web2project 5.0 version

web2project/modules-helpdesk#43 · opened

on Oct 23, 2026

Remove dead code

web2project/modules-helpdesk#42 · opened

on Oct 23, 2026

Replace deprecated `CAppUI` calls

web2project/modules-helpdesk#41 · opened

on Oct 23, 2026

Use `w2p_Controllers_Base` and core pagination

web2project/modules-helpdesk#40 · opened

on Oct 23, 2026

Port the views to the web2project 5.0 Bootstrap theme

web2project/modules-helpdesk#39 · opened

on Oct 23, 2026

Export to task changes data on a GET (no CSRF protection)

web2project/modules-helpdesk#38 · opened

on Oct 23, 2026

Any logged-in user can delete any ticket

web2project/modules-helpdesk#37 · opened

on Oct 23, 2026

PHP code injection through the configure page (no escaping, no CSRF token)

web2project/modules-helpdesk#36 · opened

on Oct 23, 2026

Stored XSS in titles, requestor fields, watchers and history

web2project/modules-helpdesk#35 · opened

on Oct 23, 2026

SQL injection in the ticket list filters and sort order

web2project/modules-helpdesk#34 · opened

on Oct 23, 2026

Stats tab counts every ticket, ignoring item permissions

web2project/modules-helpdesk#33 · opened

on Oct 23, 2026

Uninstall leaves 43 sysvals behind; reinstall duplicates them

web2project/modules-helpdesk#32 · opened

on Oct 23, 2026

Rewrite `CSetupHelpDesk::upgrade()` and add requirements to install

web2project/modules-helpdesk#31 · opened

on Oct 23, 2026

Undefined variables and keys throughout (about 60 warnings on the list page)

web2project/modules-helpdesk#30 · opened

on Oct 23, 2026

Log list cost codes query uses an undefined `$proj`

web2project/modules-helpdesk#29 · opened

on Oct 23, 2026

Export to task shifts the end date by the UTC offset; module mixes UTC and local times

web2project/modules-helpdesk#28 · opened

on Oct 23, 2026

Report date ranges collapse to one day (`Date_Span`), and a stray "9" is printed

web2project/modules-helpdesk#27 · opened

on Oct 23, 2026

Add/edit page reloads jQuery over the core copy (breaks tipTip)

web2project/modules-helpdesk#26 · opened

on Oct 23, 2026

JavaScript syntax errors: `public function` inside `<script>` (delete, timer, date picker broken)

web2project/modules-helpdesk#25 · opened

on Oct 23, 2026

Title prefix printed raw: "HD-%05d HD-00001 …"

web2project/modules-helpdesk#24 · opened

on Oct 23, 2026

Delete flow stores the item, logs after deleting and leaves orphan history

web2project/modules-helpdesk#23 · opened

on Oct 23, 2026

Application field is always empty: `HelpDeskApplic` sysvals are never installed

web2project/modules-helpdesk#22 · opened

on Oct 23, 2026

List filters for Call Type, Severity, Source, Service and Application only offer "All"

web2project/modules-helpdesk#21 · opened

on Oct 23, 2026

Status-change history rows have empty comments; "closed items can't be exported" never fires

web2project/modules-helpdesk#20 · opened

on Oct 23, 2026

Navigation Menu

Repository navigation

Issues

Port HelpDesk to web2project 5.0

Release as a web2project 5.0 version

Remove dead code

Replace deprecated `CAppUI` calls

Use `w2p_Controllers_Base` and core pagination

Port the views to the web2project 5.0 Bootstrap theme

Export to task changes data on a GET (no CSRF protection)

Any logged-in user can delete any ticket

PHP code injection through the configure page (no escaping, no CSRF token)

Stored XSS in titles, requestor fields, watchers and history

SQL injection in the ticket list filters and sort order

Stats tab counts every ticket, ignoring item permissions

Uninstall leaves 43 sysvals behind; reinstall duplicates them

Rewrite `CSetupHelpDesk::upgrade()` and add requirements to install

Undefined variables and keys throughout (about 60 warnings on the list page)

Log list cost codes query uses an undefined `$proj`

Export to task shifts the end date by the UTC offset; module mixes UTC and local times

Report date ranges collapse to one day (`Date_Span`), and a stray "9" is printed

Add/edit page reloads jQuery over the core copy (breaks tipTip)

JavaScript syntax errors: `public function` inside `<script>` (delete, timer, date picker broken)

Title prefix printed raw: "HD-%05d HD-00001 …"

Delete flow stores the item, logs after deleting and leaves orphan history

Application field is always empty: `HelpDeskApplic` sysvals are never installed

List filters for Call Type, Severity, Source, Service and Application only offer "All"

Status-change history rows have empty comments; "closed items can't be exported" never fires