From 1bdd658a7d670a4c10b18e3317ae9545020e7174 Mon Sep 17 00:00:00 2001
From: Mike Koch <mkoch227@gmail.com>
Date: Sun, 27 Dec 2015 14:57:51 -0500
Subject: [PATCH] Attachments can be removed via AJAX

---
 inc/header.inc.php                  | 1 +
 internal-api/dao/attachment_dao.php | 5 +++--
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/inc/header.inc.php b/inc/header.inc.php
index b87a9593..406dad64 100644
--- a/inc/header.inc.php
+++ b/inc/header.inc.php
@@ -115,6 +115,7 @@ if (is_dir(HESK_PATH . 'install')) {
     <script type="text/javascript" src="//cdnjs.cloudflare.com/ajax/libs/leaflet/0.7.3/leaflet.js"></script>
     <script type="text/javascript" src="<?php echo HESK_PATH; ?>js/platform.js"></script>
     <script type="text/javascript" src="<?php echo HESK_PATH; ?>js/bootstrap-validator.min.js"></script>
+    <script type="text/javascript" src="<?php echo HESK_PATH; ?>internal-api/js/core.php"></script>
     <style>
         .navbar-default {
             background-color: <?php echo $modsForHesk_settings['navbarBackgroundColor']; ?>;
diff --git a/internal-api/dao/attachment_dao.php b/internal-api/dao/attachment_dao.php
index e8f4e229..ebd248af 100644
--- a/internal-api/dao/attachment_dao.php
+++ b/internal-api/dao/attachment_dao.php
@@ -4,8 +4,9 @@ function upload_temp_attachment($i, $isTicket) {
     global $hesk_settings;
 
     $info = hesk_uploadFile($i, $isTicket);
-    hesk_dbQuery("INSERT INTO `" . hesk_dbEscape($hesk_settings['db_pfix']) . "temp_attachment` (`file_name`,`size`, `type`, `date_uploaded`)
-        VALUES ('" . hesk_dbEscape($info['saved_name']) . "','" . hesk_dbEscape($info['size']) . "','" . hesk_dbEscape($isTicket ? 1 : 0) . "', NOW())");
+    hesk_dbQuery("INSERT INTO `" . hesk_dbEscape($hesk_settings['db_pfix']) . "temp_attachment` (`file_name`,`size`, `type`, `date_uploaded`, `saved_name`)
+        VALUES ('" . hesk_dbEscape($info['real_name']) . "','" . hesk_dbEscape($info['size']) . "','" . hesk_dbEscape($isTicket ? 1 : 0) . "',
+            NOW(), '" . hesk_dbEscape($info['saved_name']) . "')");
 
     return hesk_dbInsertID();
 }