PHPJunkyard support forum

Script URL: private
Version of script: latest
Hosting company: private
URL of phpinfo.php: internal
URL of session_test.php: internal
What terms did you try when SEARCHING for a solution: validate, authenticate

Write your message below: Hello. I am wondering the best way to achieve user validation just as I did when I joined this forum. You register and then respond to a URL to verify and validate it is really ME that's joining. We use Hesk as a New User Account creation ticketing system.

Theoretically anyone can walk up to an unlocked computer and open Hesk as a guest and fill out all the required fields to create or modify any of our company user accounts. I cannot use ldap authentication and I'm not about to maintain hundreds of user ID and passwords.

So hypothetically any guest can create a request to change company user account attributes. I'd like to use the generated email track URL to send to the email requester address provided where it is assumed that THAT user has "legally" authenticated themselves to the company email system.. they receive the email saying a ticket has been generated and to CLICK THIS URL to confirm they made the request.

This will mark the ticket request as authorized and we can "legally" proceed to fulfill the request.

Any ideas on how to best achieve this? Email recipient clicks URL and it changes status from Pending to Verified, legally authorizing us to proceed.

This obviously isn't something built into Hesk, so you will need to make manual code modifications to achieve it.

The simplest example I can think of would be to:

1. modify submit_ticket.php to submit tickets:
- without showing the tracking ID (or a link to the ticket) to the user submitting the ticket
- with a custom status "Pending verification"
- show a message saying they need to check their email and click the link inside

2. modify the customer's new ticket email template to say they need to click the ticket link to confirm

3. modify ticket.php to set the status to "New" when viewing a ticket if the status is set to "Pending verification"

This way when someone submits a ticket they will need to see the email and when they click the link inside (open the ticket for the first time), the status would be set to "New" from "Pending verification".



A better (but more complex) solution would require temporary storing ticket data with a single-use unique confirmation code in a separate table and only insert it into the hesk_tickets table once the ticket has been confirmed over email.


Either way, you will need help from a PHP developer to get this set up as such changes are out of the scope of my support.

Thank you. This is very helpful. I'm pretty certain I can develop the modifications you reccomend.

Kind regards.

Mods for hesk has
Customer Email Verifications (Require customers to verify email address)

not sure if this can help

I think the difference is Mods for Hesk only requires an email to be verified once, but Rbsterli needs each new ticket verified over email.