diff --git a/guest_view_ticket.php b/guest_view_ticket.php index 2e12c946..702cb712 100644 --- a/guest_view_ticket.php +++ b/guest_view_ticket.php @@ -24,9 +24,9 @@ $url_key = sanitizeInput($_GET['url_key']); $ticket_id = intval($_GET['ticket_id']); $ticket_sql = mysqli_query($mysqli, - "SELECT * FROM tickets - LEFT JOIN users on ticket_assigned_to = user_id - LEFT JOIN ticket_statuses ON ticket_status = ticket_status_id + "SELECT * FROM tickets + LEFT JOIN users on ticket_assigned_to = user_id + LEFT JOIN ticket_statuses ON ticket_status = ticket_status_id WHERE ticket_id = $ticket_id AND ticket_url_key = '$url_key'" ); diff --git a/post/ticket.php b/post/ticket.php index 18a52d83..49dcf3a6 100644 --- a/post/ticket.php +++ b/post/ticket.php @@ -375,10 +375,10 @@ if (isset($_POST['add_ticket_watcher'])) { // Get contact/ticket details $sql = mysqli_query($mysqli, "SELECT ticket_prefix, ticket_number, ticket_category, ticket_subject, ticket_details, ticket_priority, ticket_status_name, ticket_url_key, ticket_created_by, ticket_assigned_to, ticket_client_id FROM tickets - LEFT JOIN clients ON ticket_client_id = client_id + LEFT JOIN clients ON ticket_client_id = client_id LEFT JOIN contacts ON ticket_contact_id = contact_id - LEFT JOIN ticket_statuses ON ticket_status = ticket_status_id - WHERE ticket_id = $ticket_id + LEFT JOIN ticket_statuses ON ticket_status = ticket_status_id + WHERE ticket_id = $ticket_id AND ticket_closed_at IS NULL"); $row = mysqli_fetch_array($sql);