Open your /wp-content/plugins/wp-customized-login/custom-login.css file, and find this code:

2

#login h1 a{background:url(logo.png) no-repeat;}

then replace with this following code:

2
3
4
5
6
7
8

#login h1 a{
  background:transparent url(logo.png) no-repeat scroll 0 0;
  display:block;
  height:100px; /* adjust it with your logo's height */
  width:500px; /* adjust it with your logo's width */
  margin-left:-80px;  /* adjust it in order to make your logo centered */
}

You can see the demo result of the modification above from this login page of the following webiste: Visual Basic Indonesia.
Hopefully this is helpful for you.

Here is the code:

<?php 
    // assuming the value of $strApplications received from database
    $strApplications = "Application 1, Application 3, Application 5";
?>
    <tr>
      <td>Applications: </td>
      <td>
        <?php  
	  for ($j=1; $j<=5; $j++) {	          
            echo '<input type="checkbox" name="applications[]" value="Application '.$j.'" ';		
	    if ( strpos($strApplications, 'Application '.$j) !== false) {
	      echo 'checked';  // which checkbox(es) should be checked
	    } else {
	      echo '';  // otherwise, leave it unchecked
	    }	
	    echo '>Application '.$j.'<br />';
          }
          ?>      
      </td>
    </tr>

Open your \wp-content\themes\inove\templates\header.php file, and find this code:

30
31
32
33
34
35
36

		<?php
			if($options['menu_type'] == 'categories') {
				wp_list_categories('title_li=&orderby=name&show_count=0&hierarchical=1&depth=3&hide_empty=0');
			} else {
				wp_list_pages('title_li=&sort_column=menu_order');
			}
		?>

then replace with this following code:

30
31
32
33
34
35
36

		<?php
			// if($options['menu_type'] == 'categories') {
				wp_list_categories('title_li=&orderby=name&show_count=0&hierarchical=1&depth=3&hide_empty=0');
			// } else {
				wp_list_pages('title_li=&sort_column=menu_order');
			// }
		?>

Now you should see the categories and also the pages show up in the menu section of your iNove themes.

Please note that by using this modification, then the menu type option that you specified will be ignored from your iNove options in admin panel of your WordPress.

1. Open your \include\staff\tickets.inc.php file, and find this code:

   83 84

   //limited depts....user can access tickets assigned to them regardless of the dept. $qwhere =' WHERE (ticket.dept_id IN ('.implode(',',$depts).') OR ticket.staff_id='.$thisuser->getId().')';

   then replace with this following code:

   83 84 85

   //limited depts....user can access tickets assigned to them regardless of the dept. //$qwhere =' WHERE (ticket.dept_id IN ('.implode(',',$depts).') OR ticket.staff_id='.$thisuser->getId().')'; $qwhere =' WHERE (ticket.dept_id = '.$thisuser->getDeptId().' OR ticket.staff_id='.$thisuser->getId().')';

2. Open your \scp\tickets.php file, and find this code:

   24	$ticket=null; //clean start.

   after that line, please insert this following code:

   25 26 27 28 29 30 31 32 33 34 35

   if($id=$_REQUEST['id']?$_REQUEST['id']:$_POST['ticket_id'] && is_numeric($id)) { $qselect = 'SELECT ticketID, dept_id, staff_id FROM '.TICKET_TABLE. ' WHERE ticket_id='.$id.''; $rselect = db_query($qselect); if (db_num_rows($rselect) > 0) { list($ticketID, $dept_id,$staff_id) = db_fetch_row($rselect); if (($dept_id!=$thisuser->getDeptId()) && ($staff_id!=$thisuser->getId()) ) { $errors['err']='The ticket # '.$ticketID.' belongs to another department!'; } } }

   Find again this code:

   407 408 409

   if(!$thisuser->isAdmin()){ $sql.=' WHERE ticket.dept_id IN('.implode(',',$thisuser->getDepts()).') OR ticket.staff_id='.db_input($thisuser->getId()); }

   then replace with this following code:

   407 408 409 410

   if(!$thisuser->isAdmin()){ //$sql.=' WHERE ticket.dept_id IN('.implode(',',$thisuser->getDepts()).') OR ticket.staff_id='.db_input($thisuser->getId()); $sql .=' WHERE (ticket.dept_id = '.$thisuser->getDeptId().' OR ticket.staff_id='.$thisuser->getId().')'; }

That’s all. Enjoy the result!

Open your \include\class.ticket.php file, and find the getAttachmentStr function, then replace all code of its function become like this:

    // Modified by Masino Sinaga, last updated: November 5, 2009
    // in order to display image properly inside the ticket area
    // especially if the image's width greater than 820 px, then
    // resize the image's width maximum to 820 px. 
    function getAttachmentStr($refid,$type){
        global $cfg;
        $helpdesk_url=$cfg->getUrl();       
        $dir=$cfg->getUploadDir();        
        $dir = preg_replace("/\\\\/","/",$dir);
        $dir = explode('/', $dir);
        $arrDir = array_reverse($dir);
        $dir = $arrDir[0];        
        $sql ='SELECT attach_id,file_size,file_name,file_key FROM '.TICKET_ATTACHMENT_TABLE.
             ' WHERE deleted=0 AND ticket_id='.db_input($this->getId()).' AND ref_id='.db_input($refid).' AND ref_type='.db_input($type);
        $res=db_query($sql);
        if($res && db_num_rows($res)){
            while(list($id,$size,$name,$key)=db_fetch_row($res)){
                $hash=MD5($this->getId()*$refid.session_id());
                $size=Format::file_size($size);
                $ext = strtolower(substr(strrchr($name, '.'), 1));
                $fullfilename = $helpdesk_url.$dir.'/'.$key.'_'.$name;
                if (in_array($ext,array('jpg', 'png', 'gif', 'bmp'))) {
                  list($width, $height, $type, $attr) = getimagesize($fullfilename);
                    if ($width > 820) {
		      $attachstr.= '<p align="center"><a href="'.$fullfilename.'" target="_blank"><img src="'.$fullfilename.'" width="820"/></a></p><br />';
		    } else {
		      $attachstr.= '<p align="center"><a href="'.$fullfilename.'" target="_blank"><img src="'.$fullfilename.'" /></a></p><br />';
		    }
		}
                $attachstr.= "<a class='Icon file' href='attachment.php?id=$id&ref=$hash' target='_blank'><b>$name</b></a>&nbsp;(<i>$size</i>)&nbsp;&nbsp;";
            }
        }
        return ($attachstr);
    }

1. Open forgotticket.php file, and find this code:

   27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54

   $sqle='SELECT email, ticketID, name FROM '.TICKET_TABLE. ' WHERE email='.db_input($femail).' AND status = "open"'; $respe=db_query($sqle); $ticketNumber = ''; $countRec = db_num_rows($respe);   if ($countRec > 0) { $i = 1; $nameForgot = ''; while (list($email,$ticketID,$name) = db_fetch_row($respe)){ if ($i==1) { $ticketNumber .= $ticketID; } else { $ticketNumber .= ", ". $ticketID; } $nameForgot = $name; $i++; }   $tplId=$cfg->getDefaultTemplateId();   $sql='SELECT forgot_ticket_subj,forgot_ticket_body FROM '.EMAIL_TEMPLATE_TABLE. ' WHERE cfg_id='.db_input($cfg->getId()).' AND tpl_id='.db_input($tplId); $resp=db_query($sql); if(db_num_rows($resp) && list($subj,$body)=db_fetch_row($resp)){ $body = str_replace("%name", $nameForgot, $body); $body = str_replace("%email", $email, $body); $body = str_replace("%ticketlist", $ticketNumber, $body);

   then replace with this following code:

   27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66

   $sqle='SELECT email, ticketID, name, status FROM '.TICKET_TABLE. ' WHERE email='.db_input($femail).''; $respe=db_query($sqle); $ticketNumber = ''; $countRec = db_num_rows($respe);   if ($countRec > 0) { $i = 1; $j = 1; $nameForgot = ''; while (list($email,$ticketID,$name,$status) = db_fetch_row($respe)){ if ($status=='open') { if ($i==1) { $ticketNumber .= $ticketID; } else { $ticketNumber .= ", ". $ticketID; } $i++; } else { // closed status if ($j==1) { $ticketClosed .= $ticketID; } else { $ticketClosed .= ", ". $ticketID; } $j++; } $nameForgot = $name; }   $tplId=$cfg->getDefaultTemplateId();   $sql='SELECT forgot_ticket_subj,forgot_ticket_body FROM '.EMAIL_TEMPLATE_TABLE. ' WHERE cfg_id='.db_input($cfg->getId()).' AND tpl_id='.db_input($tplId); $resp=db_query($sql); if(db_num_rows($resp) && list($subj,$body)=db_fetch_row($resp)){   $body = str_replace("%name", $nameForgot, $body); $body = str_replace("%email", $email, $body); $body = str_replace("%ticketlist", $ticketNumber, $body); $body = str_replace("%ticketclosed", $ticketClosed, $body);

2. Adjust the email template from your admin panel menu: Emails -> Templates:

   from:

   Subject = Forgot Ticket Number
   Message Body = %name,

   This is the list of your tickets:
   %ticketlist

   Admin

   become:

   Subject = Forgot Ticket Number
   Message Body = %name,

   This is the list of your opened tickets:
   %ticketlist

   This is the list of your closed tickets:
   %ticketclosed

   Admin

Hopefully this is helpful.

Open \include\staff\premade.inc.php file, and find this code:

4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

//List premade answers.
$select='SELECT premade.*,dept_name ';
$from='FROM '.KB_PREMADE_TABLE.' premade LEFT JOIN '.DEPT_TABLE.' USING(dept_id) ';
 
//make sure the search query is 3 chars min...defaults to no query with warning message
if($_REQUEST['a']=='search') {
    if(!$_REQUEST['query'] || strlen($_REQUEST['query'])<3) {
        $errors['err']='Search term must be more than 3 chars';
    }else{
        //fulltext search.
        $search=true;
        $qstr.='&a='.urlencode($_REQUEST['a']);
        $qstr.='&query='.urlencode($_REQUEST['query']);
        $where=' WHERE MATCH(title,answer) AGAINST ('.db_input($_REQUEST['query']).')';
        if($_REQUEST['dept'])
            $where.=' AND dept_id='.db_input($_REQUEST['dept']);
    }
}
 
//I admit this crap sucks...but who cares??

then replace with this following code:

4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

//List premade answers.
$select='SELECT DISTINCT(d.dept_name), premade.* ';
$from='FROM '.KB_PREMADE_TABLE.' premade, '.DEPT_TABLE.' d ';
 
//make sure the search query is 3 chars min...defaults to no query with warning message
if($_REQUEST['a']=='search') {
    if(!$_REQUEST['query'] || strlen($_REQUEST['query'])<3) {
        $errors['err']=I_S_PREM_SEARCH_TERM;
    }else{
        //fulltext search.
        $search=true;
        $qstr.='&a='.urlencode($_REQUEST['a']);
        $qstr.='&query='.urlencode($_REQUEST['query']);
        $searchfor = $_REQUEST['query'];
        $where=" WHERE (premade.title LIKE '%$searchfor%' 
                 OR premade.answer LIKE '%$searchfor%') 
                 AND (d.dept_id = premade.dept_id OR premade.dept_id = 0) "; 
	if($_REQUEST['dept'])
            $where.=' AND d.dept_id='.db_input($_REQUEST['dept']);
    }
}
if (!isset($where)) $where = 'WHERE d.dept_id = premade.dept_id 
                              OR premade.dept_id = 0'; 
//I admit this crap sucks...but who cares??

Now staffs are able to search and displaying the result properly. Besides that, if a Premade Reply belongs to All Departments (for example, currently you already have 3 departments), then you will see now in the table list of Premade Replies, there are 3 records of Premade Reply for that 3 departments. With this way, when staff search for Premade Reply that belongs to certain department, then system will display the record belongs to such department only.

I watched for some topic discussion through osTicket Official Forum, and I found there that one of the most important issues in osTicket System is about displaying the ticket number to the client after they submit a new ticket. At least, more than one topic asking and or request the feature about this issue. They need this feature to be implemented in osTicket System.

As a matter of fact, this ticket number is similar with password. Thus, it has to be sent via client’s email right after client submit a new ticket. Unfortunately, many ticket system administrator and or developer do not know this reason why “displaying ticket number after client submit new ticket” was strongly forbidden. There are some developers do not agree with this rule. They want to modify the osTicket script in order to display the ticket number on “thank you” page after client submit a new ticket. Many reason why they asked this feature. One of the their reasons I ever read is: “… since my client never received the email that contains of the ticket number, I need this ticket number to be displayed right after my client submit a new ticket. I don’t need send the ticket number sent through the email address’ client!“.

Okay. Let’s discuss more detail about this. It is, indeed, strongly recommended that the ticket number should not being displayed after your client submit a new ticket. Aah, there must be, at least, one reason for this! The main reason for this is concerning the security vulnerability. Another reason that related with that reason above is: for some ticket systems, they allow their client to reply to the ticket by using email. Thus, this client’ email is obviously needed in this case.

Now, let’s take a look an example here. If you display this ticket number to your client, imagine when somebody else (Mr. X) who knows your client’s email address. Then he acts or pretends to be one of your real client who has that email address, by opening a new ticket. Afterwards, this Mr. X will be able to login by using the email address and that ticket number (the ticket number that has just been displayed a few seconds after he submits that ticket). He will be able to see all of the tickets belongs to your client. Imagine again, how if one of those tickets number contain of such an important or secret information? Do you think this is a good condition in your osTicket System?

If the problem is about your client never receive any email that contains the ticket number, you have to ensure that your email system works correctly. For example, if you use your SMTP, please check your SMTP setting, in case there is a wrong setting there. Also, you have to give such explanation to your client to enter their valid email address in order the ticket number could be sent to their mail inbox properly. It means that email address is a mandatory thing if you want to implement a support system by using this osTicket System. So, there is no reason anymore to avoid to use your client’s email address.

The conclusion: For those of you who want to implement this osTicket System for your online support, please pay attention more seriously, especially when you want to implement it on your website. Always try to remember this: Do not ever display the ticket number after submit a new ticket! Another alternative solution that you can choose is by using username and password to log in to the system by your client. And, please remember again, it also needs your client’s valid email address, as the mandatory thing for your osTicket System.

Please consider again all the explanation above, if you do not want to disappointed your client, since there are so many bad guy out there who will try to pretend as your client, in order to display and know about your client’s matter or their important information. So, be a wise people when you want to modify this osTicket System script.