File upload error

mrbig

Dear Friends,

I am new to OSticket and after finished the setup, I just found that I cannot upload file to a ticket or even upload a file to change the logo. Here below is my OSticket installation,

osTicket Version: v1.17.5 (7c20036) — Up to date
Web Server Software: Microsoft-IIS/10.0
MySQL Version: 8.0.36
PHP Version: 8.1.27

At First, I got the error of 500 when I upload a file,

File Upload Error
photo1.jpeg
undefined
500

And after I enabled CORS, I get the error 403,

File Upload Error:
photo1.jpg
undefined403

I take a look on browser inspector, it shows the below,
###################################################
XHRPOST
http://osticket.truedigital.com/osticket/ajax.php/form/upload/ticket/attach
[HTTP/1.1 403 Not allowed 221ms]

POST
http://osticket.truedigital.com/osticket/ajax.php/form/upload/ticket/attach
Status
403
Not allowed
VersionHTTP/1.1
Transferred1.37 kB (1.23 kB size)
Referrer Policystrict-origin-when-cross-origin
DNS ResolutionSystem
###################################################

Can someone guide me what I missing on the setup?

KevinTheJedi

mrbig

Make sure all site files and folders are owned by the web server or PHP-FPM user:group. Then make sure all site files and folders have the appropriate permissions. Lastly, ensure you have AllowOverride All enabled in the Apache site config in the main or site's Directory section.

Cheers.

KevinTheJedi

mrbig

You would also need to check your server to see if anything is blocking it like any request filters, etc.

Cheers.

mrbig

@KevinTheJedi Thank you very much for your reply. I try to set the permission on the website folder and allow write and modify to the user IIS_IUSRS but it doesn't work. Do I need to have a URL Rewriting rule or something?

mrbig

After I change the config in web.config file and put the exact domain name in the 'add origin = ', the error when I upload file is go back to 500. Here below is the CORS setup that I add to the IIS web.config file. Maybe I do it wrong?

################################################
<cors enabled="true" failUnlistedOrigins="true">
<add origin="" />
<add origin="http://osticket.xxxxxxx.com"
allowCredentials="true"
maxAge="120">
<allowHeaders allowAllRequestedHeaders="true">
<add header="header1" />
<add header="header2" />
</allowHeaders>
<allowMethods>
<add method="DELETE" />
</allowMethods>
<exposeHeaders>
<add header="header1" />
<add header="header2" />
</exposeHeaders>
</add>
<add origin="http://" allowed="true" />
</cors>
#####################################

anbuchezhiyan

why login page not accepting integer values as login username

KevinTheJedi

anbuchezhiyan

We do not allow numeric usernames. They must contain at least one letter character.

Cheers.

mrbig

@KevinTheJedi , just update what I found now about the issue.

I change the PHP version to "8.0.30-nts" and now I can attach the .txt, .pdf but not image file (.png, .jpg for example). The error code I get is "Invalid File". Then I check the " Enable strict Mime Type check" option and it sill unchecked.

I think I have seen somewhere in this community and said like delete the MIME type checking code. I will try to do the same if it can solve my issue.

Thanks

mrbig

Now, I think it worked now. I just edit the upload_tmp_dir = "C:\inetpub\wwwroot\osticket\temp\" to make sure that there is no permission problem.

However, this only work with PHP 8.0.x. but when I change the PHP version to 8.1.xx, it doesn't work. Here below is my Osticket installation.

osTicket Version v1.17.5 (7c20036) — Up to date
Web Server Software Microsoft-IIS/10.0
MySQL Version 8.0.36
PHP Version 8.0.30

Thank you very much.

KevinTheJedi

mrbig

Then it seems a difference in PHP installs on your instance. I cannot replicate this issue. I do know IIS has file upload issues more often than Linux servers.

Cheers.

KevinTheJedi

mrbig

I would just make sure you make the same changes on the PHP 8.1 install and make sure you have all the extensions installed/enabled as you do for PHP 8.0. Then you can restart the webserver and retest.

Cheers.

mrbig

@KevinTheJedi I make all the same changes for PHP 8.1 and PHP 8.0 but it work only with PHP 8.0.
I doubt about this as well, so I will do another test by using Linux and PHP 8.1. May be next week if I have time.

Thanks