You need to replace this code (line 725) :
Code: Select all
$res_ticket = hesk_dbQuery("SELECT `id`,`trackid`,`u_email` FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."tickets`
WHERE `trackid` = '".$ticket_track_id."'");
$get_ticket_data = hesk_dbFetchAssoc($res_ticket);
Code: Select all
// Try to determine what the user entered: trackid or just ID
$ticket_track_id = hesk_dbEscape($ticket_track_id);
// If the entered value is a number, search by ID, otherwise by trackid
if (is_numeric($ticket_track_id)) {
$res_ticket = hesk_dbQuery("SELECT `id`, `trackid`, `u_email` FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."tickets`
WHERE `id` = ".intval($ticket_track_id)." OR `trackid` = '".$ticket_track_id."'");
} else {
$res_ticket = hesk_dbQuery("SELECT `id`, `trackid`, `u_email` FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."tickets`
WHERE `trackid` = '".$ticket_track_id."'");
}
$get_ticket_data = hesk_dbFetchAssoc($res_ticket);
P.S. I took up this issue due to mild dissatisfaction among colleagues, as linking by trackid is inconvenient and requires more actions.