set('URI.AllowedSchemes', ['data' => true, 'src' => true, 'http' => true, 'https' => true]); $purifier = new HTMLPurifier($purifier_config); $allowed_extensions = array('jpg', 'jpeg', 'gif', 'png', 'webp', 'pdf', 'txt', 'md', 'doc', 'docx', 'csv', 'xls', 'xlsx', 'xlsm', 'zip', 'tar', 'gz'); if (isset($_GET['id']) && intval($_GET['id'])) { $ticket_id = intval($_GET['id']); if ($session_contact_primary == 1 || $session_contact_is_technical_contact) { // For a primary / technical contact viewing all tickets $ticket_sql = mysqli_query($mysqli, "SELECT * FROM tickets LEFT JOIN users on ticket_assigned_to = user_id LEFT JOIN ticket_statuses ON ticket_status = ticket_status_id WHERE ticket_id = $ticket_id AND ticket_client_id = $session_client_id" ); } else { // For a user viewing their own ticket $ticket_sql = mysqli_query($mysqli, "SELECT * FROM tickets LEFT JOIN users on ticket_assigned_to = user_id LEFT JOIN ticket_statuses ON ticket_status = ticket_status_id WHERE ticket_id = $ticket_id AND ticket_client_id = $session_client_id AND ticket_contact_id = $session_contact_id" ); } $ticket_row = mysqli_fetch_array($ticket_sql); if ($ticket_row) { $ticket_prefix = nullable_htmlentities($ticket_row['ticket_prefix']); $ticket_number = intval($ticket_row['ticket_number']); $ticket_status = nullable_htmlentities($ticket_row['ticket_status_name']); $ticket_priority = nullable_htmlentities($ticket_row['ticket_priority']); $ticket_subject = nullable_htmlentities($ticket_row['ticket_subject']); $ticket_details = $purifier->purify($ticket_row['ticket_details']); $ticket_assigned_to = nullable_htmlentities($ticket_row['user_name']); $ticket_closed_at = nullable_htmlentities($ticket_row['ticket_closed_at']); $ticket_feedback = nullable_htmlentities($ticket_row['ticket_feedback']); ?>

Ticket Close ticket

Subject:

State:
Priority:
Assigned to:

Rate your ticket

Rated -- Thanks for your feedback!

purify($row['ticket_reply']); $ticket_reply_created_at = nullable_htmlentities($row['ticket_reply_created_at']); $ticket_reply_updated_at = nullable_htmlentities($row['ticket_reply_updated_at']); $ticket_reply_by = intval($row['ticket_reply_by']); $ticket_reply_type = $row['ticket_reply_type']; if ($ticket_reply_type == "Client") { $ticket_reply_by_display = nullable_htmlentities($row['contact_name']); $user_initials = initials($row['contact_name']); $user_avatar = $row['contact_photo']; $avatar_link = "../uploads/clients/$session_client_id/$user_avatar"; } else { $ticket_reply_by_display = nullable_htmlentities($row['user_name']); $user_id = intval($row['user_id']); $user_avatar = $row['user_avatar']; $user_initials = initials($row['user_name']); $avatar_link = "../uploads/users/$user_id/$user_avatar"; } ?>

mb-3">