Nice... missing critical element
Posted: Wed Jul 22, 2009 10:28 pm
Script URL: http://www.tnet.com/helpdesk
Version of script: 2.0
Hosting company: ME
URL of phpinfo.php: NA
Nice script. Donation coming shortly... though I don't care about the tag line... or bothering to remove it. Just as a thanks!
One critical missing ability is to limit who can submit a ticket. Even with the spam prevention stuff, it is very easy to use the script in a malicious manner by simply submitting tickets using other peoples email addresses.
While I haven't seen it abused that way here, as a mail admin, I have seen similar issues in the past with other scripts.
To block this, I added a new input on the ticket submission that asks for a "custcode" which is actually something easy for my customers to know about and if it is not entered and matches correctly, it won't let them submit a ticket.
The coding of the script made it easy to figure where to put the check and how to add the additional messages.
Eventually, I will modify the system to show up only when a client is logged in as I do with other content on mine and other sites.
Good work on the script... nice and easy to setup and use.
Version of script: 2.0
Hosting company: ME
URL of phpinfo.php: NA
Nice script. Donation coming shortly... though I don't care about the tag line... or bothering to remove it. Just as a thanks!
One critical missing ability is to limit who can submit a ticket. Even with the spam prevention stuff, it is very easy to use the script in a malicious manner by simply submitting tickets using other peoples email addresses.
While I haven't seen it abused that way here, as a mail admin, I have seen similar issues in the past with other scripts.
To block this, I added a new input on the ticket submission that asks for a "custcode" which is actually something easy for my customers to know about and if it is not entered and matches correctly, it won't let them submit a ticket.
The coding of the script made it easy to figure where to put the check and how to add the additional messages.
Eventually, I will modify the system to show up only when a client is logged in as I do with other content on mine and other sites.
Good work on the script... nice and easy to setup and use.