From 5bd03be1ad938ed0ecfc6840add3fe208c12ba4a Mon Sep 17 00:00:00 2001
From: wrongecho <marcus@itflow.org>
Date: Wed, 14 May 2025 16:05:43 +0100
Subject: [PATCH] Ticket tasks - set maxlength html attribute

---
 admin_ticket_template_details.php       | 8 ++++----
 ajax/ajax_ticket_template_task_edit.php | 2 +-
 ticket.php                              | 2 +-
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/admin_ticket_template_details.php b/admin_ticket_template_details.php
index b8280aed..57fd3a47 100644
--- a/admin_ticket_template_details.php
+++ b/admin_ticket_template_details.php
@@ -20,7 +20,7 @@ $sql_ticket_templates = mysqli_query($mysqli, "SELECT * FROM ticket_templates WH
 $row = mysqli_fetch_array($sql_ticket_templates);
 
 $ticket_template_name = nullable_htmlentities($row['ticket_template_name']);
-$ticket_template_description = nullable_htmlentities($row['ticket_template_description']);
+//$ticket_template_description = nullable_htmlentities($row['ticket_template_description']);
 $ticket_template_subject = nullable_htmlentities($row['ticket_template_subject']);
 $ticket_template_details = $purifier->purify($row['ticket_template_details']);
 $ticket_template_created_at = nullable_htmlentities($row['ticket_template_created_at']);
@@ -54,7 +54,7 @@ $sql_task_templates = mysqli_query($mysqli, "SELECT * FROM task_templates WHERE
                         <i class="fa fa-fw fa-2x fa-life-ring mr-3"></i>
                         <div class="media-body">
                             <h3 class="mb-0"><?php echo $ticket_template_name; ?></h3>
-                            <div><small class="text-secondary"><?php echo $ticket_template_description; ?></small></div>
+                            <div><small class="text-secondary"><?php //echo $ticket_template_description; ?></small></div>
                         </div>
                     </div>
                 </h3>
@@ -86,7 +86,7 @@ $sql_task_templates = mysqli_query($mysqli, "SELECT * FROM task_templates WHERE
                             <div class="input-group-prepend">
                                 <span class="input-group-text"><i class="fa fa-fw fa-tasks"></i></span>
                             </div>
-                            <input type="text" class="form-control" name="task_name" placeholder="Create a task" required>
+                            <input type="text" class="form-control" name="task_name" placeholder="Create a task" required maxlength="200">
                             <div class="input-group-append">
                                 <button type="submit" name="add_ticket_template_task" class="btn btn-primary"><i class="fas fa-fw fa-check"></i></button>
                             </div>
@@ -99,7 +99,7 @@ $sql_task_templates = mysqli_query($mysqli, "SELECT * FROM task_templates WHERE
                         $task_id = intval($row['task_template_id']);
                         $task_name = nullable_htmlentities($row['task_template_name']);
                         $task_completion_estimate = intval($row['task_template_completion_estimate']);
-                        $task_description = nullable_htmlentities($row['task_template_description']);
+                        //$task_description = nullable_htmlentities($row['task_template_description']);
                         ?>
                         <tr data-task-id="<?php echo $task_id; ?>">
                             <td>
diff --git a/ajax/ajax_ticket_template_task_edit.php b/ajax/ajax_ticket_template_task_edit.php
index b7fe19f4..3038b877 100644
--- a/ajax/ajax_ticket_template_task_edit.php
+++ b/ajax/ajax_ticket_template_task_edit.php
@@ -10,7 +10,7 @@ $row = mysqli_fetch_array($sql);
 $task_template_name = nullable_htmlentities($row['task_template_name']);
 $task_template_order = intval($row['task_template_order']);
 $task_template_completion_estimate = intval($row['task_template_completion_estimate']);
-$task_template_description = nullable_htmlentities($row['task_template_description']);
+//$task_template_description = nullable_htmlentities($row['task_template_description']);
 
 // Generate the HTML form content using output buffering.
 ob_start();
diff --git a/ticket.php b/ticket.php
index e59446bc..84e49946 100644
--- a/ticket.php
+++ b/ticket.php
@@ -930,7 +930,7 @@ if (isset($_GET['ticket_id'])) {
                                 <input type="hidden" name="ticket_id" value="<?php echo $ticket_id; ?>">
                                 <div class="form-group">
                                     <div class="input-group input-group-sm">
-                                        <input type="text" class="form-control" name="name" placeholder="Create Task">
+                                        <input type="text" class="form-control" name="name" placeholder="Create Task" required maxlength="255">
                                         <div class="input-group-append">
                                             <button type="submit" name="add_task" class="btn btn-secondary">
                                                 <i class="fas fa-check"></i>