From 55c6f4d093f51a286515e682902316b411970c0d Mon Sep 17 00:00:00 2001
From: Mike Koch <mkoch227@gmail.com>
Date: Tue, 28 Mar 2017 21:21:17 -0400
Subject: [PATCH] Fixes #463 Support suggested KB articles when rich text is
 enabled

---
 hesk_javascript.js   | 5 +++++
 index.php            | 1 +
 suggest_articles.php | 2 +-
 3 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/hesk_javascript.js b/hesk_javascript.js
index a218ee1d..dd5c0a1a 100644
--- a/hesk_javascript.js
+++ b/hesk_javascript.js
@@ -168,6 +168,11 @@ function hesk_suggestKB() {
     var d = document.form1;
     var s = d.subject.value;
     var m = d.message.value;
+
+    if ($('textarea[name="message"]').data('rich-text-enabled') && tinyMCE.get('message') !== undefined) {
+        m = tinyMCE.get('message').getContent();
+    }
+
     var element = document.getElementById('kb_suggestions');
 
     if (s != '' && m != '' && (heskKBquery != s + " " + m || heskKBfailed == true)) {
diff --git a/index.php b/index.php
index caa38350..bddb2cd8 100644
--- a/index.php
+++ b/index.php
@@ -680,6 +680,7 @@ function print_add_ticket()
                             <div class="col-sm-9">
                         <textarea placeholder="<?php echo htmlspecialchars($hesklang['message']); ?>" name="message"
                                   id="message" class="form-control htmlEditor" rows="12"
+                                  data-rich-text-enabled="<?php echo $modsForHesk_settings['rich_text_for_tickets_for_customers'];  ?>"
                                   cols="60" <?php if (in_array('message', $_SESSION['iserror'])) {
                             echo ' class="isError" ';
                         } ?> data-error="<?php echo htmlspecialchars($hesklang['enter_message']); ?>"
diff --git a/suggest_articles.php b/suggest_articles.php
index 68f3b41f..13002665 100644
--- a/suggest_articles.php
+++ b/suggest_articles.php
@@ -23,7 +23,7 @@ hesk_load_database_functions();
 header('Content-Type: text/html; charset=' . $hesklang['ENCODING']);
 
 /* Get the search query composed of the subject and message */
-$query = hesk_REQUEST('q') or die('');
+$query = strip_tags(html_entity_decode(hesk_REQUEST('q'))) or die('');
 
 hesk_dbConnect();