mirror of https://github.com/itflow-org/itflow
Ticket API: Allow HTML into ticket Content and allow inserting asset_id
This commit is contained in:
parent
411a6efeb5
commit
8196706538
|
|
@ -39,7 +39,7 @@ if (!empty($subject)) {
|
|||
|
||||
// Insert ticket
|
||||
$url_key = randomString(156);
|
||||
$insert_sql = mysqli_query($mysqli,"INSERT INTO tickets SET ticket_prefix = '$config_ticket_prefix', ticket_number = $ticket_number, ticket_source = 'API', ticket_subject = '$subject', ticket_details = '$details', ticket_priority = '$priority', ticket_status = 1, ticket_billable = $billable, ticket_vendor_ticket_number = '$vendor_ticket_number', ticket_vendor_id = $vendor_id, ticket_created_by = 0, ticket_assigned_to = $assigned_to, ticket_contact_id = $contact, ticket_url_key = '$url_key', ticket_client_id = $client_id");
|
||||
$insert_sql = mysqli_query($mysqli,"INSERT INTO tickets SET ticket_prefix = '$config_ticket_prefix', ticket_number = $ticket_number, ticket_source = 'API', ticket_subject = '$subject', ticket_details = '$details', ticket_priority = '$priority', ticket_status = 1, ticket_billable = $billable, ticket_vendor_ticket_number = '$vendor_ticket_number', ticket_vendor_id = $vendor_id, ticket_created_by = 0, ticket_assigned_to = $assigned_to, ticket_contact_id = $contact, ticket_asset_id = $asset, ticket_url_key = '$url_key', ticket_client_id = $client_id");
|
||||
|
||||
// Check insert & get insert ID
|
||||
if ($insert_sql) {
|
||||
|
|
|
|||
|
|
@ -10,6 +10,14 @@ if (isset($_POST['ticket_contact_id'])) {
|
|||
$contact = '0';
|
||||
}
|
||||
|
||||
if (isset($_POST['ticket_asset_id'])) {
|
||||
$asset = intval($_POST['ticket_asset_id']);
|
||||
} elseif ($ticket_row) {
|
||||
$asset = $ticket_row['ticket_asset_id'];
|
||||
} else {
|
||||
$asset = '0';
|
||||
}
|
||||
|
||||
if (isset($_POST['ticket_subject'])) {
|
||||
$subject = sanitizeInput($_POST['ticket_subject']);
|
||||
} elseif ($ticket_row) {
|
||||
|
|
@ -29,7 +37,7 @@ if (isset($_POST['ticket_priority'])) {
|
|||
|
||||
|
||||
if (isset($_POST['ticket_details'])) {
|
||||
$details = sanitizeInput($_POST['ticket_details']) . "<br>";
|
||||
$details = mysqli_escape_string($mysqli, $_POST['ticket_details'] . "<br>");
|
||||
} elseif ($ticket_row) {
|
||||
$details = $ticket_row['ticket_details'];
|
||||
} else {
|
||||
|
|
|
|||
Loading…
Reference in New Issue