jared d33f761a55 Fix loose comparisons in authorization checks ...

- TicketModel.php: fix bind_param "sssi"→"issi" for ticketId in addComment()
- TicketModel.php: use strict (int) cast === for confidential ticket access check
- update_ticket.php: use strict (int) cast !== for creator/assignee auth check
- AttachmentModel.php: use strict (int) cast === for upload ownership check

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-28 22:35:48 -04:00

..

ApiKeyModel.php

SSO Update :)

2026-01-01 15:40:32 -05:00

AttachmentModel.php

Fix loose comparisons in authorization checks

2026-03-28 22:35:48 -04:00

AuditLogModel.php

Add security logging, domain validation, and output helpers

2026-01-30 18:51:16 -05:00

BulkOperationsModel.php

Integrate web_template design system and fix security/quality issues

2026-03-17 23:22:24 -04:00

CommentModel.php

Fix type safety and TDS class naming issues

2026-03-28 22:29:28 -04:00

CustomFieldModel.php

Implement comprehensive improvement plan (Phases 1-6)

2026-01-20 09:55:01 -05:00

DependencyModel.php

Add query optimization and reliability improvements

2026-01-30 18:31:46 -05:00

RecurringTicketModel.php

Implement comprehensive improvement plan (Phases 1-6)

2026-01-20 09:55:01 -05:00

SavedFiltersModel.php

Integrate web_template design system and fix security/quality issues

2026-03-17 23:22:24 -04:00

StatsModel.php

Apply visibility filtering to dashboard statistics

2026-03-20 21:44:01 -04:00

TemplateModel.php

Fix bind_param type mismatches and integer validation

2026-03-28 22:33:48 -04:00

TicketModel.php

Fix loose comparisons in authorization checks

2026-03-28 22:35:48 -04:00

UserModel.php

Fix critical bugs breaking ticket page and settings modal

2026-01-30 19:10:30 -05:00

UserPreferencesModel.php

Add PHP 7.4+ type hints to helpers, models, and middleware

2026-01-29 11:04:36 -05:00

WorkflowModel.php

Integrate web_template design system and fix security/quality issues

2026-03-17 23:22:24 -04:00