If you call the query e.g. ../tickets.php?a=search&status=closed&uid=XXX to display closed tickets by user ID, all tickets are displayed in the system. How could be solved? Anyone have an idea? cheers addi

Please help us to help you by reading and following the posting guidelines located in this thread: Please read before requesting assistance. The more information you give us the better we will be able to assist you. Thank you.

Environment details?
Version of osTicket?
Steps to re-produce issue?

  • addi replied to this.

    Hi notzier, thank you for reaching out.
    I used the osTicket version 1.12.2.
    Environment: MySQL-Version: 5.6.43, PHP-Version 7.2.22, Apache Server, all PHP-Settings are set correctly.

    For example, if you click on "closed Tickets", all tickets are displayed to me and not just to the user:

    Query: ./tickets.php?a=search&status=closed&uid=XXX

    Do you have any idea ?
    Cheers Addi

    7 months later

    I am unable to replicate this report on my production sites (running 1.14.2).

    In the meantime I also work under 1.14.2. The bug is still there. If I search with an e-mail address all tickets shows me.
    If I replace the lines "$criteria = ['useremailsaddress', 'equal', $GET['query']];" with " $criteria = [':keywords', null, $GET['query']];" in the file scp/tickets.php, not all tickets are shown anymore, but sometimes wrong ones get mixed up.

    Also, when the query "tickets.php?a=search&status=closed&uid=XXX" is executed, all tickets are displayed again.

    Where can I find the class "AdhocSearch" ?

    4 months later

    Did someone find a solution to this? I've upgraded from 1.10 to 1.14 and am having same issue: URL's such as /scp/tickets.php?a=search&status=open&uid=8260 do not return filtered results (I get back everything).

    a year later

    We focused the same issue after update from 1.10 to 1.15.
    Seeams for us that the Organisation ID and the User ID are not searchable fields, thats why the search only gives the open or closed tickets out and not filter also for the other attributes.
    Adding the follow into class.ticket.php fixes the issue:
    in the static function getSearchableFields
    $base = array(
    'user__org_id' => new NumericField(array(
    'label' => __('Organisation ID')
    )),
    'user_id' => new NumericField(array(
    'label' => __('User ID')
    )),

    Write a Reply...