From accd424634823431b35731a895f38083f47b28b1 Mon Sep 17 00:00:00 2001
From: Mike Koch <mkoch227@gmail.com>
Date: Sat, 17 Oct 2015 22:06:57 -0400
Subject: [PATCH] #370 Fix download attachment with email required

---
 inc/view_attachment_functions.inc.php | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/inc/view_attachment_functions.inc.php b/inc/view_attachment_functions.inc.php
index 49c9cb9d..98652243 100644
--- a/inc/view_attachment_functions.inc.php
+++ b/inc/view_attachment_functions.inc.php
@@ -3,6 +3,11 @@ function mfh_listAttachments($attachments = '', $reply = 0, $is_staff)
 {
     global $hesk_settings, $hesklang, $trackingID, $can_edit, $can_delete;
 
+    $email = '';
+    if (!$is_staff) {
+        $email = $hesk_settings['e_query'];
+    }
+
     /* Attachments disabled or not available */
     if (!$hesk_settings['attachments']['use'] || !strlen($attachments)) {
         return false;
@@ -59,7 +64,7 @@ function mfh_listAttachments($attachments = '', $reply = 0, $is_staff)
                                           </div>
                                           <div class="modal-footer">
                                               <button type="button" class="btn btn-default" data-dismiss="modal">' . $hesklang['close_modal'] . '</button>
-                                              <a href="' . $download_path . 'download_attachment.php?att_id=' . $att_id . '&amp;track=' . $trackingID . '" class="btn btn-success">' . $hesklang['dnl'] . '</a>
+                                              <a href="' . $download_path . 'download_attachment.php?att_id=' . $att_id . '&amp;track=' . $trackingID . $email . '" class="btn btn-success">' . $hesklang['dnl'] . '</a>
                                           </div>
                                       </div>
                                   </div>
@@ -87,7 +92,7 @@ function mfh_listAttachments($attachments = '', $reply = 0, $is_staff)
                 echo '<a class="btn btn-danger" href="admin_ticket.php?delatt=' . $att_id . '&amp;reply=' . $reply . '&amp;track=' . $trackingID . '&amp;Refresh=' . mt_rand(10000, 99999) . '&amp;token=' . hesk_token_echo(0) . '" onclick="return hesk_confirmExecute(\'' . hesk_makeJsString($hesklang['pda']) . '\');" data-toggle="tooltip" data-placement="top" data-original-title="' . $hesklang['delete'] . '"><i class="fa fa-times"></i></a> ';
             }
         }
-        echo '<a class="btn btn-success" href="' . $download_path . 'download_attachment.php?att_id=' . $att_id . '&amp;track=' . $trackingID . '"
+        echo '<a class="btn btn-success" href="' . $download_path . 'download_attachment.php?att_id=' . $att_id . '&amp;track=' . $trackingID . $email . '"
                         data-toggle="tooltip" data-placement="top" data-original-title="' . $hesklang['dnl'] . '">
                             <i class="fa fa-arrow-down"></i>
                       </a>';