jaredandClaude Sonnet 4.6 7be283423a Fix loose comparisons, missing response codes, and session handling ...

- ticket.js: escape dependency_id with lt.escHtml() in data attribute
- assign_ticket.php: strict (int) cast for ticket_id (> 0 check), authorization
  comparisons, and add missing http_response_code(400) on invalid user ID
- TicketView.php: strict (int) cast for priority select, assigned_to select,
  and comment ownership check
- CommentModel.php: strict (int) cast for parent_comment_id thread comparison
- UserModel.php: strict (int) cast for is_admin check
- export_tickets.php: conditional session_start() to avoid double-start warning

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-29 17:39:46 -04:00

..

add_comment.php

Fix visibility enforcement and register missing API routes

2026-03-20 21:39:02 -04:00

assign_ticket.php

Fix loose comparisons, missing response codes, and session handling

2026-03-29 17:39:46 -04:00

audit_log.php

Fix CSS variables, missing utility classes, API hardening, and audit log UX

2026-03-28 13:22:12 -04:00

bootstrap.php

Apply web_template gap analysis improvements (P1-P3)

2026-03-29 17:02:40 -04:00

bulk_operation.php

Fix type safety and TDS class naming issues

2026-03-28 22:29:28 -04:00

check_duplicates.php

Fix visibility enforcement and register missing API routes

2026-03-20 21:39:02 -04:00

clone_ticket.php

Use canUserAccessTicket() in clone_ticket.php; fix README bootstrap entry

2026-03-20 21:47:03 -04:00

custom_fields.php

Fix error message disclosure in API endpoints

2026-01-30 18:56:29 -05:00

delete_attachment.php

Fix bind_param type mismatches and integer validation

2026-03-28 22:33:48 -04:00

delete_comment.php

Integrate web_template design system and fix security/quality issues

2026-03-17 23:22:24 -04:00

download_attachment.php

Fix bind_param type mismatches and integer validation

2026-03-28 22:33:48 -04:00

export_tickets.php

Fix loose comparisons, missing response codes, and session handling

2026-03-29 17:39:46 -04:00

generate_api_key.php

Fix error message disclosure in API endpoints

2026-01-30 18:56:29 -05:00

get_template.php

Fix bind_param type mismatches and integer validation

2026-03-28 22:33:48 -04:00

get_users.php

Audit fixes: security, dead code removal, API consolidation, JS dedup

2026-02-11 14:50:06 -05:00

health.php

Add performance, security, and reliability improvements

2026-01-30 14:39:13 -05:00

manage_recurring.php

Fix bind_param type mismatches and integer validation

2026-03-28 22:33:48 -04:00

manage_templates.php

Harden attachment deletion and template CRUD validation

2026-03-28 13:41:22 -04:00

manage_workflows.php

Fix bind_param type mismatches and integer validation

2026-03-28 22:33:48 -04:00

revoke_api_key.php

Fix error message disclosure in API endpoints

2026-01-30 18:56:29 -05:00

saved_filters.php

Audit fixes: security, dead code removal, API consolidation, JS dedup

2026-02-11 14:50:06 -05:00

ticket_dependencies.php

Fix visibility enforcement and register missing API routes

2026-03-20 21:39:02 -04:00

update_comment.php

Integrate web_template design system and fix security/quality issues

2026-03-17 23:22:24 -04:00

update_ticket.php

Fix loose comparisons in authorization checks

2026-03-28 22:35:48 -04:00

upload_attachment.php

Enforce ticket visibility on attachment and update endpoints

2026-03-20 21:42:47 -04:00

user_avatar.php

fix: ldap_get_entries returns raw binary, remove incorrect base64 decode

2026-03-28 20:53:49 -04:00

user_preferences.php

Audit fixes: security, dead code removal, API consolidation, JS dedup

2026-02-11 14:50:06 -05:00