Page 1 of 1

Nice... missing critical element

Posted: Wed Jul 22, 2009 10:28 pm
by krelvinaz
Script URL: http://www.tnet.com/helpdesk
Version of script: 2.0
Hosting company: ME
URL of phpinfo.php: NA

Nice script. Donation coming shortly... though I don't care about the tag line... or bothering to remove it. Just as a thanks!

One critical missing ability is to limit who can submit a ticket. Even with the spam prevention stuff, it is very easy to use the script in a malicious manner by simply submitting tickets using other peoples email addresses.

While I haven't seen it abused that way here, as a mail admin, I have seen similar issues in the past with other scripts.

To block this, I added a new input on the ticket submission that asks for a "custcode" which is actually something easy for my customers to know about and if it is not entered and matches correctly, it won't let them submit a ticket.

The coding of the script made it easy to figure where to put the check and how to add the additional messages.

Eventually, I will modify the system to show up only when a client is logged in as I do with other content on mine and other sites.

Good work on the script... nice and easy to setup and use.

Posted: Thu Jul 23, 2009 10:35 am
by Klemen
Glad you like it.

Regarding your comments the entire idea of a "help desk" is to allow anyone to submit a ticket (anyone who visits your website), it's how most help desks work.

If you want to limit the script to just some people then way you advise is one way to go. The other way to go would for example be to create customer accounts and only allow posting tickets to registered customers. Then you could either have a register form or (to be even more strict) automatically create customer accounts based on for example purchases made.