tinker_tickets

Files

T

jared 7be283423a Fix loose comparisons, missing response codes, and session handling

- ticket.js: escape dependency_id with lt.escHtml() in data attribute
- assign_ticket.php: strict (int) cast for ticket_id (> 0 check), authorization
  comparisons, and add missing http_response_code(400) on invalid user ID
- TicketView.php: strict (int) cast for priority select, assigned_to select,
  and comment ownership check
- CommentModel.php: strict (int) cast for parent_comment_id thread comparison
- UserModel.php: strict (int) cast for is_admin check
- export_tickets.php: conditional session_start() to avoid double-start warning

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-29 17:39:46 -04:00

admin

Apply web_template gap analysis improvements (P1-P3)

2026-03-29 17:02:40 -04:00

CreateTicketView.php

fix: CSRF on ticket create form, DOM-safe duplicate list, audit-log param validation

2026-03-28 21:26:52 -04:00

DashboardView.php

Align UI with web_template TDS v1.2 standards

2026-03-28 13:06:40 -04:00

error_403.php

Apply web_template gap analysis improvements (P1-P3)