User Tools

Site Tools


projects:supaloc_support

Supaloc Support

Description

That is a OsTicket server and provide a help-desk ticketing system.

It uses email and SMS pathways.

Custom code

07/05/2019: on file /include/class.ticket.php.

/* from line 1052 */
$alert = $this->replaceVars($msg, array('recipient' => 'Jessica McMurray - email copy'));
$email->sendAlert('[email protected]', $alert['subj'], $alert['body'], null, $options);

11/07/2019: on file /include/class.ticket.php.

/* from line 1563 */
$alert = $this->replaceVars($msg, array('recipient' => 'Jessica McMurray - email copy'));
$email->sendAlert('[email protected]', $alert['subj'], $alert['body'], null, $options);

15/07/2019: on file /include/class.api.php.

    function requireApiKey() {
        # Validate the API key -- required to be sent via the X-API-Key
        # header

        if(!($key=$this->getApiKey()))
            return $this->exerr(401, __('Valid API key required'));
        elseif (!$key->isActive() || $key->getIPAddr()!='127.0.0.1')
            return $this->exerr(401, __('API key not found/active or source IP not authorized'));

        return $key;
    }

    function getApiKey() {

        if (!$this->apikey && isset($_SERVER['HTTP_X_API_KEY']))
            $this->apikey = API::lookupByKey($_SERVER['HTTP_X_API_KEY'], '127.0.0.1');

        return $this->apikey;
    }

Servers used

Log

Date Action Comment
07/05/2019Code hackWe allow some users to receive all emails generated by the app.
11/07/2019Code hackWe allow some users to receive all emails generated by the app. Applying previous patch
15/07/2019Code hackForcing REMOTE_ADDR in order to allow containers dynamic IP
projects/supaloc_support.txt · Last modified: 2019/07/18 09:29 by 192.168.2.126