From 26bf481b056f95440b3c5208d90e07215d8b29f9 Mon Sep 17 00:00:00 2001
From: Mike Koch <mkoch227@gmail.com>
Date: Sun, 15 Jun 2014 10:12:27 -0400
Subject: [PATCH] Updated change_status.php for client side (marking ticket
 resolved)

---
 change_status.php | 109 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 109 insertions(+)
 create mode 100644 change_status.php

diff --git a/change_status.php b/change_status.php
new file mode 100644
index 00000000..8a1d3eed
--- /dev/null
+++ b/change_status.php
@@ -0,0 +1,109 @@
+<?php
+/*******************************************************************************
+*  Title: Help Desk Software HESK
+*  Version: 2.5.3 from 16th March 2014
+*  Author: Klemen Stirn
+*  Website: http://www.hesk.com
+********************************************************************************
+*  COPYRIGHT AND TRADEMARK NOTICE
+*  Copyright 2005-2014 Klemen Stirn. All Rights Reserved.
+*  HESK is a registered trademark of Klemen Stirn.
+
+*  The HESK may be used and modified free of charge by anyone
+*  AS LONG AS COPYRIGHT NOTICES AND ALL THE COMMENTS REMAIN INTACT.
+*  By using this code you agree to indemnify Klemen Stirn from any
+*  liability that might arise from it's use.
+
+*  Selling the code for this program, in part or full, without prior
+*  written consent is expressly forbidden.
+
+*  Using this code, in part or full, to create derivate work,
+*  new scripts or products is expressly forbidden. Obtain permission
+*  before redistributing this software over the Internet or in
+*  any other medium. In all cases copyright and header must remain intact.
+*  This Copyright is in full effect in any country that has International
+*  Trade Agreements with the United States of America or
+*  with the European Union.
+
+*  Removing any of the copyright notices without purchasing a license
+*  is expressly forbidden. To remove HESK copyright notice you must purchase
+*  a license for this script. For more information on how to obtain
+*  a license please visit the page below:
+*  https://www.hesk.com/buy.php
+*******************************************************************************/
+
+define('IN_SCRIPT',1);
+define('HESK_PATH','./');
+
+// Get all the required files and functions
+require(HESK_PATH . 'hesk_settings.inc.php');
+require(HESK_PATH . 'inc/common.inc.php');
+hesk_load_database_functions();
+
+hesk_session_start();
+
+// A security check
+hesk_token_check();
+
+// Get the tracking ID
+$trackingID = hesk_cleanID() or die("$hesklang[int_error]: $hesklang[no_trackID]");
+
+// Get new status
+$status = intval( hesk_GET('s', 0) );
+
+$locked = 0;
+
+$statusRow = hesk_dbFetchAssoc(hesk_dbQuery('SELECT `IsClosed` FROM `'.hesk_dbEscape($hesk_settings['db_pfix']).'statuses` WHERE ID = '.$status));
+if ($statusRow['IsClosed']) // Closed
+{
+	$action = $hesklang['closed'];
+    $revision = sprintf($hesklang['thist3'],hesk_date(),$hesklang['customer']);
+
+    if ($hesk_settings['custopen'] != 1)
+    {
+    	$locked = 1;
+    }
+}
+elseif ($status == 2) // Opened
+{
+	// Is customer reopening tickets enabled?
+	if ( ! $hesk_settings['custopen'])
+	{
+		hesk_error($hesklang['attempt']);
+	}
+
+	$action = $hesklang['opened'];
+    $revision = sprintf($hesklang['thist4'],hesk_date(),$hesklang['customer']);
+
+	// We will ask the customer why is the ticket being reopened
+	$_SESSION['force_form_top'] = true;
+}
+else
+{
+	die("$hesklang[int_error]: $hesklang[status_not_valid].");
+}
+
+// Connect to database
+hesk_dbConnect();
+
+// Verify email address match if needed
+hesk_verifyEmailMatch($trackingID);
+
+// Modify values in the database
+hesk_dbQuery("UPDATE `".hesk_dbEscape($hesk_settings['db_pfix'])."tickets` SET `status`='{$status}', `locked`='{$locked}', `history`=CONCAT(`history`,'".hesk_dbEscape($revision)."') WHERE `trackid`='".hesk_dbEscape($trackingID)."' AND `locked` != '1' LIMIT 1");
+
+// Did we modify anything*
+if (hesk_dbAffectedRows() != 1)
+{
+	hesk_error($hesklang['elocked']);
+}
+
+// Show success message
+if ($status == 2)
+{
+	hesk_process_messages($hesklang['wrepo'],'ticket.php?track='.$trackingID.$hesk_settings['e_param'].'&Refresh='.rand(10000,99999),'NOTICE');
+}
+else
+{
+	hesk_process_messages($hesklang['your_ticket_been'].' '.$action,'ticket.php?track='.$trackingID.$hesk_settings['e_param'].'&Refresh='.rand(10000,99999),'SUCCESS');
+}