AnonymousFox

//var/softaculous/hesk/changelog.txt

Changes in 3.7.11 - 3rd August 2026
- improved customer creation, reuse, and email ownership checks across ticket submission workflows
- security: fixed several issues related to parameter parsing and usage
- security: hardened connection tests
- fix: issues printing and linking tickets with a null assignedby value
- fix: FROM DUAL added to WHERE NOT EXISTS for SQL queries to work in some MariaDB modes
- fix: admin ticket creation rejecting existing customers with same email when accounts are disabled
- fix: customer ticket list could end up without a link to the ticket
- fix: empty OAuth provider setting can cause issues during upgrades
- fix: PHP 8.1+ deprecation when printing anonymized tickets
- fix: report failed IMAP tests when saving settings
- updated TinyMCE to 7.9.3

Changes in 3.7.10 - 26th May 2026
- fix: SQL error when updating from 3.7.8 to 3.7.9 using the full update file rather than the patch
- fix: POP3 fetching stopped working properly in 3.7.9 due to r/rb mode mismatch
- fix: database result checked against the wrong variable when re-sending reply notifications

Changes in 3.7.9 - 23rd May 2026
- security: various fixes and improvements
- changed URL generator to only auto-link safe schemes (http, https, mailto)
- improved security and reliability of email-to-ticket attachment processing
- fix: email link scanners (common in enterprise use) invalidate password reset links
- fix: fixed validation of custom ticket priority values in new ticket creation
- fix: show the backup code form again when a wrong MFA backup code is entered
- fix: duplicate tickets appearing in exports when duplicate collaborator records existed
- fix: ticket exports showing the current time as "First reply at" for tickets with no first reply
- fix: report warnings when time tracking was disabled
- fix: custom priorities are not properly used in some cases
- fix: "this week" and "last week" date range issue on Mondays
- fix: edge case ticket display issue not printing table head

Changes in 3.7.8 - 4th May 2026
- security: various fixes and improvements
- fix: missing users in bulk assign list with permission granted by group
- fix: display deactivated users' names in the ticket list
- fix: clicking help icon should not initiate the action
- fix: wrong database function call when clearing temporary attachments
- fix: missing include when bulk resolving tickets with collaborators and customer notifications are off
- fix: HTML code in aria-label must be encoded
- fix: wrong aria-label variable in admin_ticket.php
- fix: column email in where clause is ambiguous when searching for tickets
- fix: deleting custom status wipes out ticket custom field

Changes in 3.7.7 - 16th April 2026
- fix: a JS error in 3.7.6 breaks knowledgebase administration
- fix: wrong aria-label variable