Open Script Solution

The aim of the title of this article is to provide the additional prerequisite that is password when client obviously wanted to open a new ticket in osTicket System v1.6 RC5. I made this modification by adding a new field named password in ost_ticket table. After client open a new ticket, then osTicket will generate the new password and display a message that inform client about the password that has just been sent to the client’s email. The ticket will be set to ‘delay’ status at this moment, instead of set to ‘open’ status. This password then will be automatically being sent by osTicket to the client’s email including the URL contains of that password. Afterwards, client has to click on that URL link in order to activate the ticket (in this case, osTicket will change the ticket status from ‘delay’ become ‘open’). Therefore, staff will be able to see that ticket on the ticket list via staff-panel. Read more…

There are some resources that recommend you to set register_globals become Off on your PHP installation in order to keep your website secure. Some of them are:
- Using Register Globals
- How do I deal with register_globals?
We are not talking or discussing about those resources, but the question is: “How do I change this register_globals value become Off anyhow if its directive on my server currently is On, and in the same time I could not change the register_globals directive from the php.ini file?” Well, here is the solution for you. Read more…

In WordPress, almost plugins that I have used, do not include the index.html or index.php file inside its directory. As default, up to WordPress version 2.8.4, there is no protection to prevent or to avoid directory listing the first time you access your website after you install your WordPress. Thus, you or even your visitor can type such as http://www.yourdomain.com/wp-content/plugins/akismet/ then, voila… you or they can see the directory list which has the files inside that /akismet/ sub directory. You should take care about this early. Otherwise, if your visitor know about the weakness of your plugins that you currently use, they can exploit the bugs and hack your website easily. To avoid this happened, there are three methods that you can do how to avoid the directory list in your WordPress. Read more…