Hi there Good day! We installed osticket 18.4. We are facing an issue with advanced search. It is Just Loading not showing any result. Pls assist us. osTicket Version v1.18.4 (8d38b06) — Up to date Web Server Software Apache/2.4.68 (Unix) OpenSSL/3.5.5 MySQL Version 10.5.29 PHP Version 8.2.33
josem
Check all possible logs (general server logs, webserver error logs, PHP error logs, MySQL/MariaDB error logs, osTicket System Logs, Browser Console logs, etc.) for related errors.
Cheers.
Hi Kevin
Good day! when we check log getting below message form Mod Security Configuration in CWP [Tue Sep 01 08:01:29.035168 2026] [:error] [pid 936492:tid 936494] [client 192.168.180.77:18820] [client 192.168.180.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i🙁?:\\b(?🙁?:s(?:ys\\.(?:user(?🙁?:t(?:ab(?:column|le)|rigger)|object|view)s|c(?:onstraints|atalog))|all_tables|tab)|elect\\b.{0,40}\\b(?:substring|users?|ascii))|m(?:sys(?🙁?:queri|ac)e|relationship|column|object)s|ysql\\.(db|user))|c(?:onstraint ..." at ARGS_NAMES:columns[1][column_id]. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "116"] [id "950007"] [rev "2"] [msg "Blind SQL Injection Attack"] [data "Matched Data: column_id found within ARGS_NAMES:columns[1][column_id]: columns[1][column_id]"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "customercare.choppies.co.zm"] [uri "/scp/ajax.php/tickets/search"] [unique_id "apZqOWp6zF4dDgf_xwGaWAAAAMA"], referer: https://mydomain/scp/index.php
When we check Browser console it showing 403 forbidden on scp/ajax.php/tickets/serarch
Then your host is blocking the requests. Contact them to whitelist or add exception for the application.
