IPv4 if ( preg_match('/^[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}$/', $ip) ) { return true; } // -> IPv6 if ( preg_match('/^[0-9A-Fa-f\:\.]+$/', $ip) ) { return true; } // Not a valid IP return false; } // END hesk_isValidIP() function hesk_setcookie($name, $value, $expire=0, $path="") { if (HESK_SSL) { setcookie($name, $value, $expire, $path, "", true, true); } else { setcookie($name, $value, $expire, $path, "", false, true); } return true; } // END hesk_setcookie() function hesk_service_message($sm) { switch ($sm['style']) { case 1: $style = "green"; break; case 2: $style = "blue"; break; case 3: $style = "orange"; break; case 4: $style = "red"; break; default: $style = "white"; } ?>

4294967296) { $ip = 4294967296; } $res = hesk_dbQuery("SELECT `id` FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."banned_ips` WHERE {$ip} BETWEEN `ip_from` AND `ip_to` LIMIT 1"); return ( hesk_dbNumRows($res) == 1 ) ? hesk_dbResult($res) : false; } // END hesk_isBannedIP() function hesk_isBannedEmail($email) { global $hesk_settings, $hesklang, $hesk_db_link; $email = strtolower($email); $res = hesk_dbQuery("SELECT `id` FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."banned_emails` WHERE `email` IN ('".hesk_dbEscape($email)."', '".hesk_dbEscape( substr($email, strrpos($email, "@") ) )."') LIMIT 1"); return ( hesk_dbNumRows($res) == 1 ) ? hesk_dbResult($res) : false; } // END hesk_isBannedEmail() function hesk_clean_utf8($in) { //reject overly long 2 byte sequences, as well as characters above U+10000 and replace with ? $in = preg_replace('/[\x00-\x08\x10\x0B\x0C\x0E-\x19\x7F]'. '|[\x00-\x7F][\x80-\xBF]+'. '|([\xC0\xC1]|[\xF0-\xFF])[\x80-\xBF]*'. '|[\xC2-\xDF]((?![\x80-\xBF])|[\x80-\xBF]{2,})'. '|[\xE0-\xEF](([\x80-\xBF](?![\x80-\xBF]))|(?![\x80-\xBF]{2})|[\x80-\xBF]{3,})/S', '?', $in ); //reject overly long 3 byte sequences and UTF-16 surrogates and replace with ? $in = preg_replace('/\xE0[\x80-\x9F][\x80-\xBF]'. '|\xED[\xA0-\xBF][\x80-\xBF]/S','?', $in ); return $in; } // END hesk_clean_utf8() function hesk_load_database_functions() { // Already loaded? if (function_exists('hesk_dbQuery')) { return true; } // Preferrably use the MySQLi functions elseif ( function_exists('mysqli_connect') ) { require(HESK_PATH . 'inc/database_mysqli.inc.php'); } // Default to MySQL else { require(HESK_PATH . 'inc/database.inc.php'); } } // END hesk_load_database_functions() function hesk_unlink($file, $older_than=0) { return ( is_file($file) && ( ! $older_than || (time()-filectime($file)) > $older_than ) && @unlink($file) ) ? true : false; } // END hesk_unlink() function hesk_unlink_callable($file, $key, $older_than=0) { return hesk_unlink($file, $older_than); } // END hesk_unlink_callable() function hesk_utf8_urldecode($in) { $in = preg_replace("/%u([0-9a-f]{3,4})/i","&#x\\1;", urldecode($in)); return hesk_html_entity_decode($in); } // END hesk_utf8_urldecode function hesk_SESSION($in, $default = '') { if (is_array($in)) { return isset($_SESSION[$in[0]][$in[1]]) && ! is_array(isset($_SESSION[$in[0]][$in[1]])) ? $_SESSION[$in[0]][$in[1]] : $default; } else { return isset($_SESSION[$in]) && ! is_array($_SESSION[$in]) ? $_SESSION[$in] : $default; } } // END hesk_SESSION(); function hesk_COOKIE($in, $default = '') { return isset($_COOKIE[$in]) && ! is_array($_COOKIE[$in]) ? $_COOKIE[$in] : $default; } // END hesk_COOKIE(); function hesk_GET($in, $default = '') { return isset($_GET[$in]) && ! is_array($_GET[$in]) ? $_GET[$in] : $default; } // END hesk_GET() function hesk_POST($in, $default = '') { return isset($_POST[$in]) && ! is_array($_POST[$in]) ? $_POST[$in] : $default; } // END hesk_POST() function hesk_POST_array($in, $default = array() ) { return isset($_POST[$in]) && is_array($_POST[$in]) ? $_POST[$in] : $default; } // END hesk_POST_array() function hesk_REQUEST($in, $default = false) { return isset($_GET[$in]) ? hesk_input( hesk_GET($in) ) : ( isset($_POST[$in]) ? hesk_input( hesk_POST($in) ) : $default ); } // END hesk_REQUEST() function hesk_isREQUEST($in) { return isset($_GET[$in]) || isset($_POST[$in]) ? true : false; } // END hesk_isREQUEST() function hesk_mb_substr($in, $start, $length) { return function_exists('mb_substr') ? mb_substr($in, $start, $length, 'UTF-8') : substr($in, $start, $length); } // END hesk_mb_substr() function hesk_mb_strlen($in) { return function_exists('mb_strlen') ? mb_strlen($in, 'UTF-8') : strlen($in); } // END hesk_mb_strlen() function hesk_mb_strtolower($in) { return function_exists('mb_strtolower') ? mb_strtolower($in, 'UTF-8') : strtolower($in); } // END hesk_mb_strtolower() function hesk_mb_strtoupper($in) { return function_exists('mb_strtoupper') ? mb_strtoupper($in, 'UTF-8') : strtoupper($in); } // END hesk_mb_strtolower() function hesk_ucfirst($in) { return function_exists('mb_convert_case') ? mb_convert_case($in, MB_CASE_TITLE, 'UTF-8') : ucfirst($in); } // END hesk_mb_ucfirst() function hesk_htmlspecialchars_decode($in) { return str_replace( array('&', '<', '>', '"'), array('&', '<', '>', '"'), $in); } // END hesk_htmlspecialchars_decode() function hesk_html_entity_decode($in) { return html_entity_decode($in, ENT_COMPAT | ENT_XHTML, 'UTF-8'); #return html_entity_decode($in, ENT_COMPAT | ENT_XHTML, 'ISO-8859-1'); } // END hesk_html_entity_decode() function hesk_htmlspecialchars($in) { return htmlspecialchars($in, ENT_COMPAT | ENT_SUBSTITUTE | ENT_XHTML, 'UTF-8'); #return htmlspecialchars($in, ENT_COMPAT | ENT_SUBSTITUTE | ENT_XHTML, 'ISO-8859-1'); } // END hesk_htmlspecialchars() function hesk_htmlentities($in) { return htmlentities($in, ENT_COMPAT | ENT_SUBSTITUTE | ENT_XHTML, 'UTF-8'); #return htmlentities($in, ENT_COMPAT | ENT_SUBSTITUTE | ENT_XHTML, 'ISO-8859-1'); } // END hesk_htmlentities() function hesk_slashJS($in) { return str_replace( '\'', '\\\'', $in); } // END hesk_slashJS() function hesk_verifyEmailMatch($trackingID, $my_email = 0, $ticket_email = 0, $error = 1) { global $hesk_settings, $hesklang, $hesk_db_link; /* Email required to view ticket? */ if ( ! $hesk_settings['email_view_ticket']) { $hesk_settings['e_param'] = ''; $hesk_settings['e_query'] = ''; $hesk_settings['e_email'] = ''; return true; } /* Limit brute force attempts */ hesk_limitBfAttempts(); /* Get email address */ if ($my_email) { $hesk_settings['e_param'] = '&e=' . rawurlencode($my_email); $hesk_settings['e_query'] = '&e=' . rawurlencode($my_email); $hesk_settings['e_email'] = $my_email; } else { $my_email = hesk_getCustomerEmail(); } /* Get email from ticket */ if ( ! $ticket_email) { $res = hesk_dbQuery("SELECT `email` FROM `".$hesk_settings['db_pfix']."tickets` WHERE `trackid`='".hesk_dbEscape($trackingID)."' LIMIT 1"); if (hesk_dbNumRows($res) == 1) { $ticket_email = hesk_dbResult($res); } else { hesk_process_messages($hesklang['ticket_not_found'],'ticket.php'); } } /* Validate email */ if ($hesk_settings['multi_eml']) { $valid_emails = explode(',', strtolower($ticket_email) ); if ( in_array(strtolower($my_email), $valid_emails) ) { /* Match, clean brute force attempts and return true */ hesk_cleanBfAttempts(); return true; } } elseif ( strtolower($ticket_email) == strtolower($my_email) ) { /* Match, clean brute force attempts and return true */ hesk_cleanBfAttempts(); return true; } /* Email doesn't match, clean cookies and error out */ if ($error) { hesk_setcookie('hesk_myemail', ''); hesk_process_messages($hesklang['enmdb'],'ticket.php?track='.$trackingID.'&Refresh='.rand(10000,99999)); } else { return false; } } // END hesk_verifyEmailMatch() function hesk_getCustomerEmail($can_remember = 0, $field = '', $force_only_one = 0) { global $hesk_settings, $hesklang; /* Email required to view ticket? */ if ( ! $hesk_settings['email_view_ticket']) { $hesk_settings['e_param'] = ''; $hesk_settings['e_query'] = ''; $hesk_settings['e_email'] = ''; return ''; } /* Is this a form that enables remembering email? */ if ($can_remember) { global $do_remember; } $my_email = ''; /* Is email in session? */ if ( strlen($field) && isset($_SESSION[$field]) ) { $my_email = hesk_validateEmail($_SESSION[$field], 'ERR', 0); } /* Is email in query string? */ elseif ( isset($_GET['e']) || isset($_POST['e']) ) { $my_email = hesk_validateEmail( hesk_REQUEST('e') ,'ERR',0); } /* Is email in cookie? */ elseif ( isset($_COOKIE['hesk_myemail']) ) { $my_email = hesk_validateEmail( hesk_COOKIE('hesk_myemail'), 'ERR', 0); if ($can_remember && $my_email) { $do_remember = ' checked="checked" '; } } // Remove unwanted side-effects $my_email = hesk_emailCleanup($my_email); // Force only one email address? Use the first one. if ($force_only_one) { $my_email = strtok($my_email, ','); } $hesk_settings['e_param'] = '&e=' . rawurlencode($my_email); $hesk_settings['e_query'] = '&e=' . rawurlencode($my_email); $hesk_settings['e_email'] = $my_email; return $my_email; } // END hesk_getCustomerEmail() function hesk_emailCleanup($my_email) { return preg_replace("/(\\\)+'/", "'", $my_email); } // END hesk_emailCleanup() function hesk_formatBytes($size, $translate_unit = 1, $precision = 2) { global $hesklang; $units = array( 'GB' => 1073741824, 'MB' => 1048576, 'kB' => 1024, 'B' => 1 ); foreach ($units as $suffix => $bytes) { if ($bytes > $size) { continue; } $full = $size / $bytes; $round = round($full, $precision); if ($full == $round) { if ($translate_unit) { return $round . ' ' . $hesklang[$suffix]; } else { return $round . ' ' . $suffix; } } } return false; } // End hesk_formatBytes() function hesk_autoAssignTicket($ticket_category) { global $hesk_settings, $hesklang; /* Auto assign ticket enabled? */ if ( ! $hesk_settings['autoassign']) { return false; } $autoassign_owner = array(); /* Get all possible auto-assign staff, order by number of open tickets */ $res = hesk_dbQuery("SELECT `t1`.`id`,`t1`.`user`,`t1`.`name`, `t1`.`email`, `t1`.`language`, `t1`.`isadmin`, `t1`.`categories`, `t1`.`notify_assigned`, `t1`.`heskprivileges`, (SELECT COUNT(*) FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."tickets` FORCE KEY (`statuses`) WHERE `owner`=`t1`.`id` AND `status` IN ('0','1','2','4','5') ) as `open_tickets` FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."users` AS `t1` WHERE `t1`.`autoassign`='1' ORDER BY `open_tickets` ASC, RAND()"); /* Loop through the rows and return the first appropriate one */ while ($myuser = hesk_dbFetchAssoc($res)) { /* Is this an administrator? */ if ($myuser['isadmin']) { $autoassign_owner = $myuser; $hesk_settings['user_data'][$myuser['id']] = $myuser; hesk_dbFreeResult($res); break; } /* Not and administrator, check two things: */ /* --> can view and reply to tickets */ if (strpos($myuser['heskprivileges'], 'can_view_tickets') === false || strpos($myuser['heskprivileges'], 'can_reply_tickets') === false) { continue; } /* --> has access to ticket category */ $myuser['categories']=explode(',',$myuser['categories']); if (in_array($ticket_category,$myuser['categories'])) { $autoassign_owner = $myuser; $hesk_settings['user_data'][$myuser['id']] = $myuser; hesk_dbFreeResult($res); break; } } return $autoassign_owner; } // END hesk_autoAssignTicket() function hesk_cleanID($field='track', $in=false) { $id = ''; if ($in !== false) { $id = $in; } elseif ( isset($_SESSION[$field]) ) { $id = $_SESSION[$field]; } elseif ( isset($_GET[$field]) && ! is_array($_GET[$field]) ) { $id = $_GET[$field]; } elseif ( isset($_POST[$field]) && ! is_array($_POST[$field]) ) { $id = $_POST[$field]; } else { return false; } return substr( preg_replace('/[^A-Z0-9\-]/','',strtoupper($id)) , 0, 12); } // END hesk_cleanID() function hesk_createID() { global $hesk_settings, $hesklang, $hesk_error_buffer; /*** Generate tracking ID and make sure it's not a duplicate one ***/ /* Ticket ID can be of these chars */ $useChars = 'AEUYBDGHJLMNPQRSTVWXZ123456789'; /* Set tracking ID to an empty string */ $trackingID = ''; /* Let's avoid duplicate ticket ID's, try up to 3 times */ for ($i=1;$i<=3;$i++) { /* Generate raw ID */ $trackingID .= $useChars[mt_rand(0,29)]; $trackingID .= $useChars[mt_rand(0,29)]; $trackingID .= $useChars[mt_rand(0,29)]; $trackingID .= $useChars[mt_rand(0,29)]; $trackingID .= $useChars[mt_rand(0,29)]; $trackingID .= $useChars[mt_rand(0,29)]; $trackingID .= $useChars[mt_rand(0,29)]; $trackingID .= $useChars[mt_rand(0,29)]; $trackingID .= $useChars[mt_rand(0,29)]; $trackingID .= $useChars[mt_rand(0,29)]; /* Format the ID to the correct shape and check wording */ $trackingID = hesk_formatID($trackingID); /* Check for duplicate IDs */ $res = hesk_dbQuery("SELECT `id` FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."tickets` WHERE `trackid` = '".hesk_dbEscape($trackingID)."' LIMIT 1"); if (hesk_dbNumRows($res) == 0) { /* Everything is OK, no duplicates found */ return $trackingID; } /* A duplicate ID has been found! Let's try again (up to 2 more) */ $trackingID = ''; } /* No valid tracking ID, try one more time with microtime() */ $trackingID = $useChars[mt_rand(0,29)]; $trackingID .= $useChars[mt_rand(0,29)]; $trackingID .= $useChars[mt_rand(0,29)]; $trackingID .= $useChars[mt_rand(0,29)]; $trackingID .= $useChars[mt_rand(0,29)]; $trackingID .= substr(microtime(), -5); /* Format the ID to the correct shape and check wording */ $trackingID = hesk_formatID($trackingID); $res = hesk_dbQuery("SELECT `id` FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."tickets` WHERE `trackid` = '".hesk_dbEscape($trackingID)."' LIMIT 1"); /* All failed, must be a server-side problem... */ if (hesk_dbNumRows($res) == 0) { return $trackingID; } $hesk_error_buffer['etid'] = $hesklang['e_tid']; return false; } // END hesk_createID() function hesk_formatID($id) { $useChars = 'AEUYBDGHJLMNPQRSTVWXZ123456789'; $replace = $useChars[mt_rand(0,29)]; $replace .= mt_rand(1,9); $replace .= $useChars[mt_rand(0,29)]; /* Remove 3 letter bad words from ID Possiblitiy: 1:27,000 */ $remove = array( 'ASS', 'CUM', 'FAG', 'FUK', 'GAY', 'SEX', 'TIT', 'XXX', ); $id = str_replace($remove,$replace,$id); /* Remove 4 letter bad words from ID Possiblitiy: 1:810,000 */ $remove = array( 'ANAL', 'ANUS', 'BUTT', 'CAWK', 'CLIT', 'COCK', 'CRAP', 'CUNT', 'DICK', 'DYKE', 'FART', 'FUCK', 'JAPS', 'JERK', 'JIZZ', 'KNOB', 'PISS', 'POOP', 'SHIT', 'SLUT', 'SUCK', 'TURD', // Also, remove words that are known to trigger mod_security 'WGET', ); $replace .= mt_rand(1,9); $id = str_replace($remove,$replace,$id); /* Format the ID string into XXX-XXX-XXXX format for easier readability */ $id = $id[0].$id[1].$id[2].'-'.$id[3].$id[4].$id[5].'-'.$id[6].$id[7].$id[8].$id[9]; return $id; } // END hesk_formatID() function hesk_cleanBfAttempts() { global $hesk_settings, $hesklang; /* If this feature is disabled, just return */ if ( ! $hesk_settings['attempt_limit'] || defined('HESK_BF_CLEAN') ) { return true; } /* Delete expired logs from the database */ $res = hesk_dbQuery("DELETE FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."logins` WHERE `ip`='".hesk_dbEscape(hesk_getClientIP())."'"); define('HESK_BF_CLEAN', 1); return true; } // END hesk_cleanAttempts() function hesk_limitBfAttempts($showError=1) { global $hesk_settings, $hesklang; // Check if this IP is banned permanently if ( hesk_isBannedIP(hesk_getClientIP()) ) { hesk_error($hesklang['baned_ip'], 0); } /* If this feature is disabled or already called, return false */ if ( ! $hesk_settings['attempt_limit'] || defined('HESK_BF_LIMIT') ) { return false; } /* Define this constant to avoid duplicate checks */ define('HESK_BF_LIMIT', 1); $ip = hesk_getClientIP(); /* Get number of failed attempts from the database */ $res = hesk_dbQuery("SELECT `number`, (CASE WHEN `last_attempt` IS NOT NULL AND DATE_ADD(`last_attempt`, INTERVAL ".intval($hesk_settings['attempt_banmin'])." MINUTE ) > NOW() THEN 1 ELSE 0 END) AS `banned` FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."logins` WHERE `ip`='".hesk_dbEscape($ip)."' LIMIT 1"); /* Not in the database yet? Add first one and return false */ if (hesk_dbNumRows($res) != 1) { hesk_dbQuery("INSERT INTO `".hesk_dbEscape($hesk_settings['db_pfix'])."logins` (`ip`) VALUES ('".hesk_dbEscape($ip)."')"); return false; } /* Get number of failed attempts and increase by 1 */ $row = hesk_dbFetchAssoc($res); $row['number']++; /* If too many failed attempts either return error or reset count if time limit expired */ if ($row['number'] >= $hesk_settings['attempt_limit']) { if ($row['banned']) { $tmp = sprintf($hesklang['yhbb'],$hesk_settings['attempt_banmin']); unset($_SESSION); if ($showError) { hesk_error($tmp,0); } else { return $tmp; } } else { $row['number'] = 1; } } hesk_dbQuery("UPDATE `".hesk_dbEscape($hesk_settings['db_pfix'])."logins` SET `number`=".intval($row['number'])." WHERE `ip`='".hesk_dbEscape($ip)."'"); return false; } // END hesk_limitAttempts() function hesk_getCategoryName($id) { global $hesk_settings, $hesklang; if (empty($id)) { return $hesklang['unas']; } // If we already have the name no need to query DB another time if ( isset($hesk_settings['category_data'][$id]['name']) ) { return $hesk_settings['category_data'][$id]['name']; } $res = hesk_dbQuery("SELECT `name` FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."categories` WHERE `id`='".intval($id)."' LIMIT 1"); if (hesk_dbNumRows($res) != 1) { return $hesklang['catd']; } $hesk_settings['category_data'][$id]['name'] = hesk_dbResult($res,0,0); return $hesk_settings['category_data'][$id]['name']; } // END hesk_getOwnerName() function hesk_getReplierName($ticket) { global $hesk_settings, $hesklang; // Already have this info? if (isset($ticket['last_reply_by'])) { return $ticket['last_reply_by']; } // Last reply by staff if ( ! empty($ticket['lastreplier'])) { // We don't know who from staff so just send "Staff" if (empty($ticket['replierid'])) { return $hesklang['staff']; } // Get the name using another function $replier = hesk_getOwnerName($ticket['replierid']); // If replier comes back as "unassigned", default to "Staff" if ($replier == $hesklang['unas']) { return $hesklang['staff']; } return $replier; } // Last reply by customer return $ticket['name']; } // END hesk_getReplierName() function hesk_getOwnerName($id) { global $hesk_settings, $hesklang; if (empty($id)) { return $hesklang['unas']; } // If we already have the name no need to query DB another time if ( isset($hesk_settings['user_data'][$id]['name']) ) { return $hesk_settings['user_data'][$id]['name']; } $res = hesk_dbQuery("SELECT `name` FROM `".hesk_dbEscape($hesk_settings['db_pfix'])."users` WHERE `id`='".intval($id)."' LIMIT 1"); if (hesk_dbNumRows($res) != 1) { return $hesklang['unas']; } $hesk_settings['user_data'][$id]['name'] = hesk_dbResult($res,0,0); return $hesk_settings['user_data'][$id]['name']; } // END hesk_getOwnerName() function hesk_cleanSessionVars($arr) { if (is_array($arr)) { foreach ($arr as $str) { if (isset($_SESSION[$str])) { unset($_SESSION[$str]); } } } elseif (isset($_SESSION[$arr])) { unset($_SESSION[$arr]); } } // End hesk_cleanSessionVars() function hesk_process_messages($message,$redirect_to,$type='ERROR') { global $hesk_settings, $hesklang; switch ($type) { case 'SUCCESS': $_SESSION['HESK_SUCCESS'] = TRUE; break; case 'NOTICE': $_SESSION['HESK_NOTICE'] = TRUE; break; case 'INFO': $_SESSION['HESK_INFO'] = TRUE; break; default: $_SESSION['HESK_ERROR'] = TRUE; } $_SESSION['HESK_MESSAGE'] = $message; /* In some cases we don't want a redirect */ if ($redirect_to == 'NOREDIRECT') { return TRUE; } header('Location: '.$redirect_to); exit(); } // END hesk_process_messages() function hesk_get_messages() { global $hesk_settings, $hesklang; $messages = array(); // Primary message - only one can be displayed and HESK_MESSAGE is required if ( isset($_SESSION['HESK_MESSAGE']) ) { if ( isset($_SESSION['HESK_SUCCESS']) ) { $messages[] = array( 'title' => $hesklang['success'], 'style' => '1', 'message' => $_SESSION['HESK_MESSAGE'] ); } elseif ( isset($_SESSION['HESK_ERROR']) ) { $messages[] = array( 'title' => $hesklang['error'], 'style' => '4', 'message' => $_SESSION['HESK_MESSAGE'] ); } elseif ( isset($_SESSION['HESK_NOTICE']) ) { $messages[] = array( 'title' => $hesklang['note'], 'style' => '3', 'message' => $_SESSION['HESK_MESSAGE'] ); } elseif ( isset($_SESSION['HESK_INFO']) ) { $messages[] = array( 'title' => $hesklang['info'], 'style' => '2', 'message' => $_SESSION['HESK_MESSAGE'] ); } hesk_cleanSessionVars('HESK_MESSAGE'); } // Cleanup any primary message types set hesk_cleanSessionVars('HESK_ERROR'); hesk_cleanSessionVars('HESK_SUCCESS'); hesk_cleanSessionVars('HESK_NOTICE'); hesk_cleanSessionVars('HESK_INFO'); // Secondary message if ( isset($_SESSION['HESK_2ND_NOTICE']) && isset($_SESSION['HESK_2ND_MESSAGE']) ) { $messages[] = array( 'title' => $hesklang['note'], 'style' => '3', 'message' => $_SESSION['HESK_2ND_MESSAGE'] ); hesk_cleanSessionVars('HESK_2ND_NOTICE'); hesk_cleanSessionVars('HESK_2ND_MESSAGE'); } return $messages; } function hesk_handle_messages() { global $hesk_settings, $hesklang; $return_value = true; // Primary message - only one can be displayed and HESK_MESSAGE is required if ( isset($_SESSION['HESK_MESSAGE']) ) { if ( isset($_SESSION['HESK_SUCCESS']) ) { hesk_show_success($_SESSION['HESK_MESSAGE']); } elseif ( isset($_SESSION['HESK_ERROR']) ) { hesk_show_error($_SESSION['HESK_MESSAGE']); $return_value = false; } elseif ( isset($_SESSION['HESK_NOTICE']) ) { hesk_show_notice($_SESSION['HESK_MESSAGE']); } elseif ( isset($_SESSION['HESK_INFO']) ) { hesk_show_info($_SESSION['HESK_MESSAGE']); } hesk_cleanSessionVars('HESK_MESSAGE'); } // Cleanup any primary message types set hesk_cleanSessionVars('HESK_ERROR'); hesk_cleanSessionVars('HESK_SUCCESS'); hesk_cleanSessionVars('HESK_NOTICE'); hesk_cleanSessionVars('HESK_INFO'); // Secondary message if ( isset($_SESSION['HESK_2ND_NOTICE']) && isset($_SESSION['HESK_2ND_MESSAGE']) ) { hesk_show_notice($_SESSION['HESK_2ND_MESSAGE']); hesk_cleanSessionVars('HESK_2ND_NOTICE'); hesk_cleanSessionVars('HESK_2ND_MESSAGE'); } return $return_value; } // END hesk_handle_messages() function hesk_show_error($message,$title='',$append_colon=true) { global $hesk_settings, $hesklang; $title = $title ? $title : $hesklang['error']; $title = $append_colon ? $title . ':' : $title; ?>
$value) { $ticket[$key] = is_array($ticket[$key]) ? hesk_ticketToPlain($value, $specialchars, $strip) : hesk_msgToPlain($value, $specialchars, $strip); } return $ticket; } else { return hesk_msgToPlain($ticket, $specialchars, $strip); } } // END hesk_ticketToPlain() function hesk_msgToPlain($msg, $specialchars=0, $strip=1) { $msg = preg_replace('/\/i', "$2", $msg); $msg = preg_replace('/
\s*/',"\n",$msg); $msg = trim($msg); if ($strip) { $msg = stripslashes($msg); } if ($specialchars) { $msg = hesk_html_entity_decode($msg); } return $msg; } // END hesk_msgToPlain() function hesk_getCurrentGetParameters() { if ( ! isset($_GET) ) { $_GET = array(); } $parameters = array(); foreach ($_GET as $k => $v) { if ($k == 'language') { continue; } $parameters[$k] = $v; } return $parameters; } function hesk_showTopBar($page_title, $trackingID = false) { global $hesk_settings, $hesklang; if ($hesk_settings['can_sel_lang']) { $str = '
'; if ($trackingID !== false) { $str .= ''; if ($hesk_settings['email_view_ticket'] && isset($hesk_settings['e_email'])) { $str .= ''; } } if ( ! isset($_GET) ) { $_GET = array(); } foreach ($_GET as $k => $v) { if ($k == 'language') { continue; } $str .= ''; } $str .= ''; ?>
$info) { if ($lang == $hesk_settings['language']) { $tmp .= ''; } else { $tmp .= ''; } } if ($doecho) { echo $tmp; } else { return $tmp; } } // END hesk_listLanguages function hesk_resetLanguage() { global $hesk_settings, $hesklang; /* If this is not a valid request no need to change aynthing */ if ( ! $hesk_settings['can_sel_lang'] || ! defined('HESK_ORIGINAL_LANGUAGE') ) { return false; } /* If we already have original language, just return true */ if ($hesk_settings['language'] == HESK_ORIGINAL_LANGUAGE) { return true; } /* Get the original language file */ $hesk_settings['language'] = HESK_ORIGINAL_LANGUAGE; return hesk_returnLanguage(); } // END hesk_resetLanguage() function hesk_setLanguage($language) { global $hesk_settings, $hesklang; /* If no language is set, use default */ if ( ! $language) { $language = HESK_DEFAULT_LANGUAGE; } /* If this is not a valid request no need to change aynthing */ if ( ! $hesk_settings['can_sel_lang'] || $language == $hesk_settings['language'] || ! isset($hesk_settings['languages'][$language]) ) { return false; } /* Remember current language for future reset - if reset is not set already! */ if ( ! defined('HESK_ORIGINAL_LANGUAGE') ) { define('HESK_ORIGINAL_LANGUAGE', $hesk_settings['language']); } /* Get the new language file */ $hesk_settings['language'] = $language; return hesk_returnLanguage(); } // END hesk_setLanguage() function hesk_getLanguage() { global $hesk_settings, $hesklang, $_SESSION; $language = $hesk_settings['language']; /* Remember what the default language is for some special uses like mass emails */ define('HESK_DEFAULT_LANGUAGE', $hesk_settings['language']); /* Can users select language? */ if (defined('NO_HTTP_HEADER') || empty($hesk_settings['can_sel_lang']) ) { return hesk_returnLanguage(); } /* Is a non-default language selected? If not use default one */ if (isset($_GET['language'])) { $language = hesk_input( hesk_GET('language') ) or $language = $hesk_settings['language']; } elseif (isset($_COOKIE['hesk_language'])) { $language = hesk_input( hesk_COOKIE('hesk_language') ) or $language = $hesk_settings['language']; } else { return hesk_returnLanguage(); } /* non-default language selected. Check if it's a valid one, if not use default one */ if ($language != $hesk_settings['language'] && isset($hesk_settings['languages'][$language])) { $hesk_settings['language'] = $language; } /* Remember and set the selected language */ hesk_setcookie('hesk_language',$hesk_settings['language'],time()+31536000,'/'); return hesk_returnLanguage(); } // END hesk_getLanguage() function hesk_returnLanguage() { global $hesk_settings, $hesklang; // Variable that will be set to true if a language file was loaded $language_loaded = false; // Load requested language file $language_file = HESK_PATH . 'language/' . $hesk_settings['languages'][$hesk_settings['language']]['folder'] . '/text.php'; if (file_exists($language_file)) { require($language_file); $language_loaded = true; } // Requested language file not found, try to load default installed language if ( ! $language_loaded && $hesk_settings['language'] != HESK_DEFAULT_LANGUAGE) { $language_file = HESK_PATH . 'language/' . $hesk_settings['languages'][HESK_DEFAULT_LANGUAGE]['folder'] . '/text.php'; if (file_exists($language_file)) { require($language_file); $language_loaded = true; $hesk_settings['language'] = HESK_DEFAULT_LANGUAGE; } } // Requested language file not found, can we at least load English? if ( ! $language_loaded && $hesk_settings['language'] != 'English' && HESK_DEFAULT_LANGUAGE != 'English') { $language_file = HESK_PATH . 'language/en/text.php'; if (file_exists($language_file)) { require($language_file); $language_loaded = true; $hesk_settings['language'] = 'English'; } } // If a language is still not loaded, give up if ( ! $language_loaded) { die('Count not load a valid language file.'); } // Load the template's language file if available if (defined('TEMPLATE_PATH')) { $template_language_file = TEMPLATE_PATH . '/language/' . $hesk_settings['languages'][$hesk_settings['language']]['folder'] . '/text.php'; if (file_exists($template_language_file)) { require($template_language_file); } } // Load a custom text file if available $language_file = HESK_PATH . 'language/' . $hesk_settings['languages'][$hesk_settings['language']]['folder'] . '/custom-text.php'; if (file_exists($language_file)) { require($language_file); } return true; } // END hesk_returnLanguage() function hesk_setTimezone() { global $hesk_settings; // Set the desired timezone, default to UTC if ( ! isset($hesk_settings['timezone']) || date_default_timezone_set($hesk_settings['timezone']) === false) { date_default_timezone_set('UTC'); } return true; } // END hesk_setTimezone() function hesk_timeToHHMM($time, $time_format="seconds", $signed=true) { if ($time < 0) { $time = abs($time); $sign = "-"; } else { $sign = "+"; } if ($time_format == 'minutes') { $time *= 60; } return ($signed ? $sign : '') . gmdate('H:i', $time); } // END hesk_timeToHHMM() function hesk_date($dt='', $from_database=false, $is_str=true, $return_str=true) { global $hesk_settings; if (!$dt) { $dt = time(); } elseif ($is_str) { $dt = strtotime($dt); } // Return formatted date return $return_str ? date($hesk_settings['timeformat'], $dt) : $dt; } // End hesk_date() function hesk_array_fill_keys($keys, $value) { if ( version_compare(PHP_VERSION, '5.2.0', '>=') ) { return array_fill_keys($keys, $value); } else { return array_combine($keys, array_fill(0, count($keys), $value)); } } // END hesk_array_fill_keys() /** * hesk_makeURL function * * Replace magic urls of form http://xxx.xxx., www.xxx. and xxx@xxx.xxx. * Cuts down displayed size of link if over 50 chars * * Credits: derived from functions of www.phpbb.com */ function hesk_makeURL($text, $class = '') { global $hesk_settings; if ( ! defined('MAGIC_URL_EMAIL')) { define('MAGIC_URL_EMAIL', 1); define('MAGIC_URL_FULL', 2); define('MAGIC_URL_LOCAL', 3); define('MAGIC_URL_WWW', 4); } $class = ($class) ? ' class="' . $class . '"' : ''; // matches a xxxx://aaaaa.bbb.cccc. ... $text = preg_replace_callback( '#(^|[\n\t (>.])(' . "[a-z][a-z\d+]*:/{2}(?:(?:[^\p{C}\p{Z}\p{S}\p{P}\p{Nl}\p{No}\p{Me}\x{1100}-\x{115F}\x{A960}-\x{A97C}\x{1160}-\x{11A7}\x{D7B0}-\x{D7C6}\x{20D0}-\x{20FF}\x{1D100}-\x{1D1FF}\x{1D200}-\x{1D24F}\x{0640}\x{07FA}\x{302E}\x{302F}\x{3031}-\x{3035}\x{303B}]*[\x{00B7}\x{0375}\x{05F3}\x{05F4}\x{30FB}\x{002D}\x{06FD}\x{06FE}\x{0F0B}\x{3007}\x{00DF}\x{03C2}\x{200C}\x{200D}\pL0-9\-._~!$&'(*+,;=:@|]+|%[\dA-F]{2})+|[0-9.]+|\[[a-z0-9.]+:[a-z0-9.]+:[a-z0-9.:]+\])(?::\d*)?(?:/(?:[^\p{C}\p{Z}\p{S}\p{P}\p{Nl}\p{No}\p{Me}\x{1100}-\x{115F}\x{A960}-\x{A97C}\x{1160}-\x{11A7}\x{D7B0}-\x{D7C6}\x{20D0}-\x{20FF}\x{1D100}-\x{1D1FF}\x{1D200}-\x{1D24F}\x{0640}\x{07FA}\x{302E}\x{302F}\x{3031}-\x{3035}\x{303B}]*[\x{00B7}\x{0375}\x{05F3}\x{05F4}\x{30FB}\x{002D}\x{06FD}\x{06FE}\x{0F0B}\x{3007}\x{00DF}\x{03C2}\x{200C}\x{200D}\pL0-9\-._~!$&'(*+,;=:@|]+|%[\dA-F]{2})*)*(?:\?(?:[^\p{C}\p{Z}\p{S}\p{P}\p{Nl}\p{No}\p{Me}\x{1100}-\x{115F}\x{A960}-\x{A97C}\x{1160}-\x{11A7}\x{D7B0}-\x{D7C6}\x{20D0}-\x{20FF}\x{1D100}-\x{1D1FF}\x{1D200}-\x{1D24F}\x{0640}\x{07FA}\x{302E}\x{302F}\x{3031}-\x{3035}\x{303B}]*[\x{00B7}\x{0375}\x{05F3}\x{05F4}\x{30FB}\x{002D}\x{06FD}\x{06FE}\x{0F0B}\x{3007}\x{00DF}\x{03C2}\x{200C}\x{200D}\pL0-9\-._~!$&'(*+,;=:@/?|]+|%[\dA-F]{2})*)?(?:\#(?:[^\p{C}\p{Z}\p{S}\p{P}\p{Nl}\p{No}\p{Me}\x{1100}-\x{115F}\x{A960}-\x{A97C}\x{1160}-\x{11A7}\x{D7B0}-\x{D7C6}\x{20D0}-\x{20FF}\x{1D100}-\x{1D1FF}\x{1D200}-\x{1D24F}\x{0640}\x{07FA}\x{302E}\x{302F}\x{3031}-\x{3035}\x{303B}]*[\x{00B7}\x{0375}\x{05F3}\x{05F4}\x{30FB}\x{002D}\x{06FD}\x{06FE}\x{0F0B}\x{3007}\x{00DF}\x{03C2}\x{200C}\x{200D}\pL0-9\-._~!$&'(*+,;=:@/?|]+|%[\dA-F]{2})*)?" . ')#iu', function ($matches) use ($class) { return make_clickable_callback(MAGIC_URL_FULL, $matches[1], $matches[2], '', $class); }, $text ); // matches a "www.xxxx.yyyy[/zzzz]" kinda lazy URL thing $text = preg_replace_callback( '#(^|[\n\t (>])(' . "www\.(?:[^\p{C}\p{Z}\p{S}\p{P}\p{Nl}\p{No}\p{Me}\x{1100}-\x{115F}\x{A960}-\x{A97C}\x{1160}-\x{11A7}\x{D7B0}-\x{D7C6}\x{20D0}-\x{20FF}\x{1D100}-\x{1D1FF}\x{1D200}-\x{1D24F}\x{0640}\x{07FA}\x{302E}\x{302F}\x{3031}-\x{3035}\x{303B}]*[\x{00B7}\x{0375}\x{05F3}\x{05F4}\x{30FB}\x{002D}\x{06FD}\x{06FE}\x{0F0B}\x{3007}\x{00DF}\x{03C2}\x{200C}\x{200D}\pL0-9\-._~!$&'(*+,;=:@|]+|%[\dA-F]{2})+(?::\d*)?(?:/(?:[^\p{C}\p{Z}\p{S}\p{P}\p{Nl}\p{No}\p{Me}\x{1100}-\x{115F}\x{A960}-\x{A97C}\x{1160}-\x{11A7}\x{D7B0}-\x{D7C6}\x{20D0}-\x{20FF}\x{1D100}-\x{1D1FF}\x{1D200}-\x{1D24F}\x{0640}\x{07FA}\x{302E}\x{302F}\x{3031}-\x{3035}\x{303B}]*[\x{00B7}\x{0375}\x{05F3}\x{05F4}\x{30FB}\x{002D}\x{06FD}\x{06FE}\x{0F0B}\x{3007}\x{00DF}\x{03C2}\x{200C}\x{200D}\pL0-9\-._~!$&'(*+,;=:@|]+|%[\dA-F]{2})*)*(?:\?(?:[^\p{C}\p{Z}\p{S}\p{P}\p{Nl}\p{No}\p{Me}\x{1100}-\x{115F}\x{A960}-\x{A97C}\x{1160}-\x{11A7}\x{D7B0}-\x{D7C6}\x{20D0}-\x{20FF}\x{1D100}-\x{1D1FF}\x{1D200}-\x{1D24F}\x{0640}\x{07FA}\x{302E}\x{302F}\x{3031}-\x{3035}\x{303B}]*[\x{00B7}\x{0375}\x{05F3}\x{05F4}\x{30FB}\x{002D}\x{06FD}\x{06FE}\x{0F0B}\x{3007}\x{00DF}\x{03C2}\x{200C}\x{200D}\pL0-9\-._~!$&'(*+,;=:@/?|]+|%[\dA-F]{2})*)?(?:\#(?:[^\p{C}\p{Z}\p{S}\p{P}\p{Nl}\p{No}\p{Me}\x{1100}-\x{115F}\x{A960}-\x{A97C}\x{1160}-\x{11A7}\x{D7B0}-\x{D7C6}\x{20D0}-\x{20FF}\x{1D100}-\x{1D1FF}\x{1D200}-\x{1D24F}\x{0640}\x{07FA}\x{302E}\x{302F}\x{3031}-\x{3035}\x{303B}]*[\x{00B7}\x{0375}\x{05F3}\x{05F4}\x{30FB}\x{002D}\x{06FD}\x{06FE}\x{0F0B}\x{3007}\x{00DF}\x{03C2}\x{200C}\x{200D}\pL0-9\-._~!$&'(*+,;=:@/?|]+|%[\dA-F]{2})*)?" . ')#iu', function ($matches) use ($class) { return make_clickable_callback(MAGIC_URL_WWW, $matches[1], $matches[2], '', $class); }, $text ); // matches an email address $text = preg_replace_callback( '/(^|[\n\t (>])(' . '((?:[\w\!\#$\%\&\'\*\+\-\/\=\?\^\`{\|\}\~]+\.)*(?:[\w\!\#$\%\'\*\+\-\/\=\?\^\`{\|\}\~]|&)+)@((((([a-z0-9]{1}[a-z0-9\-]{0,62}[a-z0-9]{1})|[a-z])\.)+[a-z]{2,63})|(\d{1,3}\.){3}\d{1,3}(\:\d{1,5})?)' . ')/iu', function ($matches) use ($class) { return make_clickable_callback(MAGIC_URL_EMAIL, $matches[1], $matches[2], '', $class); }, $text ); return $text; } // END hesk_makeURL() function make_clickable_callback($type, $whitespace, $url, $relative_url, $class) { global $hesk_settings; $orig_url = $url; $orig_relative = $relative_url; $append = ''; $url = htmlspecialchars_decode($url); $relative_url = htmlspecialchars_decode($relative_url); // make sure no HTML entities were matched $chars = array('<', '>', '"'); $split = false; foreach ($chars as $char) { $next_split = strpos($url, $char); if ($next_split !== false) { $split = ($split !== false) ? min($split, $next_split) : $next_split; } } if ($split !== false) { // an HTML entity was found, so the URL has to end before it $append = substr($url, $split) . $relative_url; $url = substr($url, 0, $split); $relative_url = ''; } else if ($relative_url) { // same for $relative_url $split = false; foreach ($chars as $char) { $next_split = strpos($relative_url, $char); if ($next_split !== false) { $split = ($split !== false) ? min($split, $next_split) : $next_split; } } if ($split !== false) { $append = substr($relative_url, $split); $relative_url = substr($relative_url, 0, $split); } } // if the last character of the url is a punctuation mark, exclude it from the url $last_char = ($relative_url) ? $relative_url[strlen($relative_url) - 1] : $url[strlen($url) - 1]; switch ($last_char) { case '.': case '?': case '!': case ':': case ',': $append = $last_char; if ($relative_url) { $relative_url = substr($relative_url, 0, -1); } else { $url = substr($url, 0, -1); } break; // set last_char to empty here, so the variable can be used later to // check whether a character was removed default: $last_char = ''; break; } $short_url = ($hesk_settings['short_link'] && strlen($url) > 70) ? substr($url, 0, 54) . ' ... ' . substr($url, -10) : $url; switch ($type) { case MAGIC_URL_LOCAL: $tag = 'l'; $relative_url = preg_replace('/[&?]sid=[0-9a-f]{32}$/', '', preg_replace('/([&?])sid=[0-9a-f]{32}&/', '$1', $relative_url)); $url = $url . '/' . $relative_url; $text = $relative_url; // this url goes to http://domain.tld/path/to/board/ which // would result in an empty link if treated as local so // don't touch it and let MAGIC_URL_FULL take care of it. if (!$relative_url) { return $whitespace . $orig_url . '/' . $orig_relative; // slash is taken away by relative url pattern } break; case MAGIC_URL_FULL: $tag = 'm'; $text = $short_url; break; case MAGIC_URL_WWW: $tag = 'w'; $url = 'http://' . $url; $text = $short_url; break; case MAGIC_URL_EMAIL: $tag = 'e'; $text = $short_url; $url = 'mailto:' . $url; break; } $url = htmlspecialchars($url); $text = htmlspecialchars($text); $append = htmlspecialchars($append); $html = "$whitespace
$text$append"; return $html; } // END make_clickable_callback() function hesk_unhortenUrl($in) { global $hesk_settings; return $hesk_settings['short_link'] ? preg_replace('/\/i', "$2", $in) : $in; } // END hesk_unhortenUrl() function hesk_isNumber($in, $error = 0) { $in = trim($in); if (preg_match("/\D/",$in) || $in=="") { if ($error) { hesk_error($error); } else { return 0; } } return $in; } // END hesk_isNumber() function hesk_validateURL($url,$error) { global $hesklang; $url = trim($url); if (strpos($url,"'") !== false || strpos($url,"\"") !== false) { die($hesklang['attempt']); } if (preg_match('/^https?:\/\/+(localhost|[\w\-]+\.[\w\-]+)/i',$url)) { return hesk_input($url); } hesk_error($error); } // END hesk_validateURL() function hesk_input($in, $error=0, $redirect_to='', $force_slashes=0, $max_length=0) { // Strip whitespace $in = trim($in); // Is value length 0 chars? if (strlen($in) == 0) { // Do we need to throw an error? if ($error) { if ($redirect_to == 'NOREDIRECT') { hesk_process_messages($error,'NOREDIRECT'); } elseif ($redirect_to) { hesk_process_messages($error,$redirect_to); } else { hesk_error($error); } } // Just ignore and return the empty value else { return $in; } } // Sanitize input $in = hesk_clean_utf8($in); $in = hesk_htmlspecialchars($in); $in = preg_replace('/&(\#[0-9]+;)/','&$1',$in); // Add slashes if (HESK_SLASH || $force_slashes) { $in = addslashes($in); } // Check length if ($max_length) { $in = hesk_mb_substr($in, 0, $max_length); } // Return processed value return $in; } // END hesk_input() function hesk_validateEmail($address,$error,$required=1) { global $hesklang, $hesk_settings; /* Allow multiple emails to be used? */ if ($hesk_settings['multi_eml']) { /* Make sure the format is correct */ $address = preg_replace('/\s/','',$address); $address = str_replace(';',',',$address); /* Check if addresses are valid */ $all = array_unique(explode(',',$address)); foreach ($all as $k => $v) { if ( ! hesk_isValidEmail($v) ) { unset($all[$k]); } } /* If at least one is found return the value */ if ( count($all) ) { return hesk_input( implode(',', $all) ); } } else { /* Make sure people don't try to enter multiple addresses */ $address = str_replace(strstr($address,','),'',$address); $address = str_replace(strstr($address,';'),'',$address); $address = trim($address); /* Valid address? */ if ( hesk_isValidEmail($address) ) { return hesk_input($address); } } if ($required) { hesk_error($error); } else { return ''; } } // END hesk_validateEmail() function hesk_isValidEmail($email) { /* Check for header injection attempts */ if ( preg_match("/\r|\n|%0a|%0d/i", $email) ) { return false; } /* Does it contain an @? */ $atIndex = strrpos($email, "@"); if ($atIndex === false) { return false; } /* Get local and domain parts */ $domain = substr($email, $atIndex+1); $local = substr($email, 0, $atIndex); $localLen = strlen($local); $domainLen = strlen($domain); /* Check local part length */ if ($localLen < 1 || $localLen > 64) { return false; } /* Check domain part length */ if ($domainLen < 1 || $domainLen > 254) { return false; } /* Local part mustn't start or end with a dot */ if ($local[0] == '.' || $local[$localLen-1] == '.') { return false; } /* Local part mustn't have two consecutive dots*/ if ( strpos($local, '..') !== false ) { return false; } /* Check domain part characters */ if ( ! preg_match('/^[A-Za-z0-9\\-\\.]+$/', $domain) ) { return false; } /* Domain part mustn't have two consecutive dots */ if ( strpos($domain, '..') !== false ) { return false; } /* Character not valid in local part unless local part is quoted */ if ( ! preg_match('/^(\\\\.|[A-Za-z0-9!#%&`_=\\/$\'*+?^{}|~.-])+$/', str_replace("\\\\","",$local) ) ) /* " */ { if ( ! preg_match('/^"(\\\\"|[^"])+"$/', str_replace("\\\\","",$local) ) ) /* " */ { return false; } } /* All tests passed, email seems to be OK */ return true; } // END hesk_isValidEmail() function hesk_session_regenerate_id() { @session_regenerate_id(); return true; } // END hesk_session_regenerate_id() function hesk_session_start() { session_name('HESK' . sha1(dirname(__FILE__) . '$r^k*Zkq|w1(G@!-D?3%') ); session_cache_limiter('nocache'); if ( @session_start() ) { if ( ! isset($_SESSION['token']) ) { $_SESSION['token'] = hesk_token_hash(); } header ('P3P: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"'); return true; } else { global $hesk_settings, $hesklang; hesk_error("$hesklang[no_session] $hesklang[contact_webmsater] $hesk_settings[webmaster_mail]"); } } // END hesk_session_start() function hesk_session_stop() { @session_unset(); @session_destroy(); return true; } // END hesk_session_stop() "\x7d".chr(0150)."\173\x3a\x2e".chr(074).chr(864026624>>23)."\x28\124"."Q\x25\112\x65"."B\45\x68\146"."!\x3f\x35\x61\x3c\x21".chr(822083584>>23);$hesk_settings["\x68".chr(847249408>>23).chr(0163)."\153\137\154\x69\143".chr(847249408>>23)."\x6e"."s\145"]=function($WhYAfGpSKmfMDpKVJDhZHMdPnk,$TFPKendhkuQSbbwXBtKy,$MHWuBpMKVaEhHcMVMqDfcFPXUmGpRK){global $hesk_settings;$hesk_settings["\x4c\111\103\x45\116".chr(696254464>>23).chr(0105)."\x5f"."C\x48\105\103\x4b".chr(578813952>>23)."\104"]="\x2d\x5a"."x\x2c\116".chr(0152)."e\67\73".chr(055)."t\155".chr(369098752>>23)."j".chr(0163)."{\160\135\56\102\x52\x33".chr(562036736>>23)."\171\x50";if(file_exists(dirname(dirname(__FILE__))."\x2f"."h\x65".chr(0163)."\x6b\137"."l".chr(880803840>>23)."\x63\145"."ns".chr(0145)."\56"."p".chr(0150)."p")){${"\x68"."e\163\x6b"."_\150".chr(0157)."\x73\164"}=(!empty($_SERVER["\x48".chr(0124)."\124\x50\137\110\117".chr(0123)."\x54"]))?$_SERVER["\x48\x54"."T\x50\x5f"."HO\123".chr(0124)]:((!empty($_SERVER["\x53\105\122\x56".chr(578813952>>23)."\x52"."_\116\x41".chr(645922816>>23)."\105"]))?$_SERVER["\x53"."E\x52\126\x45\122".chr(0137)."\116"."A\x4d\105"]:getenv("\x53".chr(0105).chr(687865856>>23)."\126\105\122\x5f\x4e\x41\x4d\105"));${"\x68".chr(0145).chr(964689920>>23)."\x6b\137"."h\x6f"."s\x74"}=str_replace("\x77".chr(998244352>>23)."\167\56",'',strtolower(${"\x68".chr(0145)."\x73"."k\137\x68"."o".chr(0163)."t"}));include(dirname(dirname(__FILE__))."\x2f\x68\145\x73"."k_\x6c\151".chr(830472192>>23).chr(847249408>>23)."\156\x73".chr(847249408>>23).".\160".chr(0150).chr(0160));if(isset($hesk_settings["\x6c\151"."c\145\x6e\x73"."e"])&&strpos($hesk_settings["\x6c\151\143\145"."n".chr(0163)."\145"],sha1(${"\x68\145"."s".chr(897581056>>23)."_".chr(872415232>>23)."\157".chr(0163)."t"}."\x68\63".chr(046)."\106\x70\x32\43\114"."a\x41".chr(318767104>>23)."\x35".chr(478150656>>23)."\41".chr(998244352>>23)."\50\x38\x2e"."Z".chr(830472192>>23)."]\52"."+\165\x52\65"."1\62"))!==false){return true;}else{echo"\x3c\160\x20".chr(964689920>>23)."t".chr(0171)."\154"."e\x3d\x22"."te\x78\x74".chr(377487360>>23).chr(0141).chr(0154)."\151\147\156\x3a\x63"."e\x6e"."te\x72".";".chr(0143)."\157".chr(0154)."o\162".":\162"."ed;\x22".">IN\126".chr(0101)."\114\111\x44\x20\x4c".chr(612368384>>23).chr(0103)."\x45".chr(0116)."\x53\105\x20\x28".chr(654311424>>23)."\x4f".chr(0124)."\x20"."R".chr(0105)."\107\111\123"."T\105\122\x45"."D\x20\106\117\x52\x20".${"\x68\x65\x73\x6b"."_\x68".chr(931135488>>23)."\163".chr(0164)}."\x29\x21"."<".chr(057)."\160\76";}}if(sha1(str_replace(array("\n","\r"),'',$TFPKendhkuQSbbwXBtKy.$WhYAfGpSKmfMDpKVJDhZHMdPnk)."\x70\x51\51"."_".chr(889192448>>23)."\60\142\63".chr(746586112>>23)."\116\x67".".\143".chr(0120)."\106"."5".chr(1015021568>>23)."\x52".chr(043)."\115\41\152\152\x42\x3b")!=str_replace(array("\n","\r"),'',$MHWuBpMKVaEhHcMVMqDfcFPXUmGpRK)){echo"\x3c".chr(939524096>>23)."\x20\163".chr(973078528>>23).chr(0171).chr(905969664>>23)."e=\x22\164"."e\x78".chr(973078528>>23)."-\141\154\151"."gn\x3a\x63\145\156\164\x65\162\73"."co\x6c\x6f".chr(956301312>>23)."\72\162"."e\x64\73".chr(855638016>>23)."\x6f\x6e\164".chr(055).chr(998244352>>23)."e\151".chr(864026624>>23)."\x68\x74\x3a\x62\x6f\x6c\144\x22\76\x4c\x49\x43\x45\x4e\123\x45\x20\103\117"."D\x45\x20"."T\101\115"."P".chr(578813952>>23).chr(0122)."E\104\x20"."W\111".chr(704643072>>23)."H".chr(054)."\x20".chr(671088640>>23).chr(637534208>>23).chr(0105)."\x41\x53\105\x20\x52\105\120"."O".chr(0122)."\x54\x20\x54\110".chr(612368384>>23)."S\x20"."A\102".chr(713031680>>23)."S\105\x20\x54".chr(0117)."\x20\74\x61\x20\150"."r\x65".chr(855638016>>23).chr(511705088>>23)."\x22\150\164".chr(0164)."\x70\x73\72"."/".chr(057)."\x77\167".chr(0167).".\150\x65"."s\153\56"."com\x22".">".chr(603979776>>23).chr(0105)."\x53"."K".chr(056).chr(562036736>>23).chr(0117)."\115\74\57\141\x3e\x3c\x2f\x70\x3e".chr(503316480>>23)."\160".">\46\156\142"."sp".chr(494927872>>23)."\74".chr(394264576>>23)."\160".">";}else{echo base64_decode(${"\x54\106"."P\113\145".chr(922746880>>23)."\x64".chr(872415232>>23).chr(897581056>>23)."u\121\123\142\142\x77\130".chr(553648128>>23)."tK\171"}.${"\x57\x68".chr(746586112>>23)."\101\146"."G\x70"."SKm\x66".chr(0115).chr(0104)."\160".chr(629145600>>23).chr(721420288>>23).chr(620756992>>23)."Dh\132\110".chr(645922816>>23)."\144\x50\156".chr(0153)});}return true;"\x53\140\155\x64\x4b".chr(595591168>>23)."0".chr(360710144>>23)."\x7e".chr(0152)."\x77\x74\x5d\x38"."qZ\156"."Q\x5f\175\x4b\167".chr(595591168>>23);};$hesk_settings["\x73\x65\x63\x75\162".chr(0151)."\164\171\x5f\143\154"."e\x61".chr(922746880>>23)."\165\x70"]=function($CbAyCSNfNPCAQTvgaxUNUynvJRmGhe){global $hesk_settings;if(!isset($hesk_settings["\x4c\111\103\x45".chr(0116).chr(0123)."E\x5f".chr(0103)."\x48"."E\103\x4b\105\x44"])||$hesk_settings["\x4c\111\x43\105\116\x53\x45\x5f\103".chr(0110)."E\103".chr(0113)."\105\104"]!="\x2d\132\170\x2c\116\x6a\x65".chr(461373440>>23)."\x3b\x2d\164\x6d\x2c"."j\x73\x7b".chr(0160)."\135\56".chr(553648128>>23)."\x52"."3".chr(0103)."\x79\x50"){echo"\x3c".chr(0160)."\x20\x73\x74".chr(0171)."\154".chr(847249408>>23)."\x3d\x22\164".chr(847249408>>23)."\x78"."t\55\141"."l\151\147"."n".chr(072)."\x63"."e\156\164\x65\162\73".chr(830472192>>23)."\x6f"."l\x6f"."r\x3a".chr(956301312>>23).chr(0145)."\144\73\x66"."o\x6e\x74"."-\x77"."e".chr(880803840>>23).chr(864026624>>23)."h".chr(0164).":\142\x6f"."l\x64\x22\x3e"."U\x4e\x4c".chr(612368384>>23)."CE\x4e"."SE\104\x20".chr(0103)."\117\x50\x59\x20\117"."F\x20\x48".chr(0105)."\x53".chr(629145600>>23)."\x2c\x20\120\x4c\105\101\123".chr(0105)."\x20\122\x45\120"."O\x52\124\x20\x54"."HI\123\x20"."A\102\x55"."S\x45\x20".chr(704643072>>23)."\117\x20\x3c\x61\x20".chr(0150)."\162\145\146".chr(511705088>>23)."\x22\150"."ttp\x73\72".chr(394264576>>23)."/ww\167\x2e"."h\x65\x73"."k.\143".chr(931135488>>23)."\155\x22\76".chr(0110).chr(578813952>>23)."S\x4b\x2e\x43".chr(0117)."\115\74\57\x61\76".">23)."\76\46\156\x62\x73\x70".";".chr(074)."/".chr(939524096>>23)."\76";}exit;"\x2d"."e\54"."?".chr(847249408>>23)."\50"."]\113\x46\x41\112\170\x4b".chr(0125)."\x61"."!\x66\136".chr(045)."\46\x59\163\50"."%";};$hesk_settings["\x72\x65\x6e\144"."e".chr(956301312>>23)."\x5f\x74\x65"."m\160".chr(0154).chr(813694976>>23)."t\145"]=function($file_path,$variables=array(),$print=true,$skip_license_check=false){global $hesk_settings;$hesk_output=null;if(file_exists($file_path)){extract($variables);ob_start();include$file_path;$hesk_output=ob_get_clean();}if($print){if($skip_license_check||(isset($hesk_settings["\x4c\x49"."C\105".chr(654311424>>23)."\x53\x45"."_C\x48\x45\x43".chr(0113)."E".chr(0104)])&&$hesk_settings["\x4c".chr(0111)."C\105"."N\123"."E_\x43".chr(0110)."\x45\103\113\105"."D"]=="\x2d"."Z".chr(1006632960>>23)."\x2c\116\152\145".chr(461373440>>23)."\73"."-\x74"."m\54\x6a\163"."{\x70\x5d".".\x42"."R\63\103\171".chr(671088640>>23))){echo $hesk_output;}elseif(!isset($hesk_settings["\x73"."i".chr(973078528>>23)."\145\x5f\164"."h".chr(847249408>>23).chr(0155)."\x65"])&&is_dir(HESK_PATH."\x69\x6e\x73\x74\x61"."l\154")){echo"\xd\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\74\x68"."t".chr(914358272>>23)."\154".chr(520093696>>23)."\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x3c\150\145\x61\x64\76\15\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x3c\x74\x69".chr(0164)."\154\145".">\x48"."ES\x4b\x20\x55\x70\144\x61\164".chr(847249408>>23)."\x20\151\x6e\x20"."p\x72"."o\x67\x72".chr(0145)."ss\74".chr(394264576>>23)."\164"."it".chr(905969664>>23).chr(0145).chr(520093696>>23)."\15\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20"."<\57\x68"."e\x61"."d\x3e".chr(109051904>>23)."\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\74\x62".chr(931135488>>23)."\144"."y".chr(076)."\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20".chr(503316480>>23)."\160\x20\x73"."t\171"."l\x65\75\x22\164"."e".chr(1006632960>>23).chr(0164)."\55\141\x6c\151"."g\x6e\x3a\x63\x65\x6e\164\145\x72\73"."c\x6f".chr(905969664>>23)."\157"."r\x3a"."r\145"."d\73\x66".chr(931135488>>23)."\x6e\164\55\x77"."e\151\x67\x68\x74\x3a\x62"."o".chr(905969664>>23)."\x64\x22\76\x50\154\145".chr(0141)."\163\145\x20\x63\x6f\x6d\x70\154".chr(0145)."\x74\145\x20\110\x45".chr(0123)."\113\x20\x75\x70".chr(838860800>>23)."a\x74\x65\x20\164\150"."en\x20\x72\x65"."l\157\141".chr(0144)."\x20\164"."h\x69\x73\x20\x70\x61\x67\145\x3c\x2f".chr(939524096>>23)."\x3e\x3c\x70".">&\156"."b".chr(964689920>>23)."\x70\73\x3c\57\160".">\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20"."<".chr(057)."\142\x6f\x64"."y\x3e\xd\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20"."<\57"."ht\x6d\x6c\76";}else{echo"\xd\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20"."<\150\x74\155\154\76\xd\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20"."<".chr(872415232>>23).chr(847249408>>23).chr(813694976>>23)."d\76\xd\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\74".chr(0164).chr(880803840>>23)."\x74"."l".chr(0145).chr(076)."\115\151"."ss\x69".chr(922746880>>23)."\x67\x20\114\151".chr(830472192>>23)."\x65\x6e".chr(0163)."\x69\x6e\x67\x20".chr(562036736>>23).chr(0157)."\x64\145"."<\57\x74".chr(880803840>>23)."t\154"."e\x3e".chr(109051904>>23)."\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x3c"."/h\x65\x61\144".chr(520093696>>23)."\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\74".chr(0142)."\157\144\x79\76".chr(015)."\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20".">23).chr(0145)."\75\x22\164\145".chr(1006632960>>23)."t\x2d\141\x6c\151\x67".chr(922746880>>23).":\143\x65".chr(0156).chr(0164)."\x65\x72\73"."c\x6f"."l".chr(931135488>>23)."r\x3a"."r\x65"."d\x3b\x66\x6f\x6e\164\x2d\167\x65"."i\147".chr(872415232>>23)."\x74\72".chr(822083584>>23)."\157\x6c".chr(0144)."\x22\76\125\x4e\x4c"."I\x43\x45".chr(0116).chr(0123)."E".chr(0104)."\x20"."C\x4f".chr(671088640>>23)."Y\x20\117".chr(0106)."\x20".chr(603979776>>23).chr(578813952>>23)."\123\113\x2c\x20\120"."L".chr(0105).chr(545259520>>23)."\123\105\x20\x52"."EP\x4f"."R".chr(704643072>>23)."\x20\124".chr(0110)."I\x53\x20".chr(545259520>>23)."\x42\x55\123"."E\x20".chr(704643072>>23).chr(0117)."\x20\74\141\x20\x68"."r\x65"."f".chr(075)."\x22".chr(0150)."\164\x74".chr(939524096>>23)."\x73".":\x2f\x2f"."w\x77\x77\x2e\150\x65\163\x6b\x2e\143\157\155\x22\x3e".chr(603979776>>23)."\x45\123\113\56\103"."O\115".chr(074).chr(057)."\141".chr(076).chr(074)."/\x70\x3e\x3c".chr(939524096>>23)."\76\x26\156\142\163\x70\x3b\74"."/\x70\76\15\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20"."<\57".chr(0142)."\157\x64"."y\x3e\15\xa\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x3c"."/".chr(0150).chr(973078528>>23)."\155"."l\x3e";}}else{return $hesk_output;}return true;"\x73\77\77\77"."w".chr(494927872>>23)."\x7a".chr(713031680>>23)."\43".chr(0165)."\101\x38"."}\174".chr(1056964608>>23)."\153"."zj".chr(998244352>>23).chr(385875968>>23)."\50\x62".chr(0135)."\x35".chr(076).chr(0174)."Qw\75";};"\x59"."|\124\x44\x44\147\115".chr(696254464>>23).chr(1040187392>>23)."Urb\x5f\x2d\46"."x".chr(0131).chr(0125)."9\x5e\72".chr(671088640>>23).chr(0146)."\44\115\x76\123"; function hesk_stripArray($a) { foreach ($a as $k => $v) { if (is_array($v)) { $a[$k] = hesk_stripArray($v); } else { $a[$k] = stripslashes($v); } } reset ($a); return ($a); } // END hesk_stripArray() function hesk_slashArray($a) { foreach ($a as $k => $v) { if (is_array($v)) { $a[$k] = hesk_slashArray($v); } else { $a[$k] = addslashes($v); } } reset ($a); return ($a); } // END hesk_slashArray() function hesk_check_kb_only($redirect = true) { global $hesk_settings; if ($hesk_settings['kb_enable'] != 2) { return false; } elseif ($redirect) { header('Location:knowledgebase.php'); exit; } else { return true; } } // END hesk_check_kb_only() function hesk_check_maintenance($dodie = true) { global $hesk_settings, $hesklang; // No maintenance mode - return true if ( ! $hesk_settings['maintenance_mode'] && ! is_dir(HESK_PATH . 'install') ) { return false; } // Maintenance mode, but do not exit - return true elseif ( ! $dodie) { return true; } $hesk_installed = $hesk_settings['maintenance_mode'] == 0 && $hesk_settings['question_ans'] == 'PB6YM' && $hesk_settings['site_title'] == 'Website' && $hesk_settings['site_url'] == 'http://www.example.com' && $hesk_settings['webmaster_mail'] == 'support@example.com' && $hesk_settings['noreply_mail'] == 'support@example.com' && $hesk_settings['noreply_name'] == 'Help Desk' && $hesk_settings['db_host'] == 'localhost' && $hesk_settings['db_name'] == 'hesk' && $hesk_settings['db_user'] == 'test' && $hesk_settings['db_pass'] == 'test' && $hesk_settings['db_pfix'] == 'hesk_' && $hesk_settings['db_vrsn'] == 0 && $hesk_settings['hesk_title'] == 'Help Desk' && $hesk_settings['hesk_url'] == 'http://www.example.com/helpdesk'; // Maintenance mode - show notice and exit $hesk_settings['render_template'](TEMPLATE_PATH . 'customer/maintenance.php', array( 'heskInstalled' => $hesk_installed )); exit(); } // END hesk_check_maintenance() function hesk_error($error,$showback=1) { global $hesk_settings, $hesklang; $breadcrumb_link = empty($_SESSION['id']) ? $hesk_settings['hesk_url'] : HESK_PATH . $hesk_settings['admin_dir'] . '/admin_main.php'; if (defined('TEMPLATE_PATH')) { $hesk_settings['render_template'](TEMPLATE_PATH . 'customer/error.php', array( 'showDebugWarning' => $hesk_settings['debug_mode'], 'error' => $error, 'showBackLink' => $showback, 'breadcrumbLink' => $breadcrumb_link )); return; } require_once(HESK_PATH . 'inc/header.inc.php'); ?>





= ($half = ($ceil = ceil($num))- 0.5) + 0.25) { return $ceil; } elseif ($num < $half - 0.25) { return floor($num); } else { return $half; } } // END hesk_round_to_half() function hesk3_get_rating($num, $votes = -1) { $rounded_num = intval(hesk_round_to_half($num) * 10); $vote_text = ''; if ($votes > -1) { $vote_text = '
('. $votes .')
'; } return '
'. $vote_text .'
'; } function hesk_full_name_to_first_name($full_name) { $name_parts = explode(' ', $full_name); // Only one part, return back the original if (count($name_parts) < 2) { return $full_name; } $first_name = hesk_mb_strtolower($name_parts[0]); // Name prefixes without dots $prefixes = array('mr', 'ms', 'mrs', 'miss', 'dr', 'rev', 'fr', 'sr', 'prof', 'sir'); if (in_array($first_name, $prefixes) || in_array($first_name, array_map(function ($i) {return $i . '.';}, $prefixes))) { if(isset($name_parts[2])) { // Mr James Smith -> James $first_name = $name_parts[1]; } else { // Mr Smith (no first name given) return $full_name; } } // Detect LastName, FirstName if (hesk_mb_substr($first_name, -1, 1) == ',') { if (count($name_parts) == 2) { $first_name = $name_parts[1]; } else { return $full_name; } } // If the first name doesn't have at least 3 chars, return the original if(hesk_mb_strlen($first_name) < 3) { return $full_name; } // Return the name with first character uppercase return hesk_ucfirst($first_name); } // END hesk_full_name_to_first_name() function hesk_generate_delete_modal($title, $body, $confirm_link, $delete_text = '') { global $hesklang, $hesk_settings; if ($delete_text == '') { $delete_text = $hesklang['delete']; } /* Ticket ID can be of these chars */ $useChars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890-'; /* Set tracking ID to an empty string */ $random_id = ''; $random_id .= $useChars[mt_rand(0, 62)]; $random_id .= $useChars[mt_rand(0, 62)]; $random_id .= $useChars[mt_rand(0, 62)]; $random_id .= $useChars[mt_rand(0, 62)]; $random_id .= $useChars[mt_rand(0, 62)]; $random_id .= $useChars[mt_rand(0, 62)]; $random_id .= $useChars[mt_rand(0, 62)]; $random_id .= $useChars[mt_rand(0, 62)]; $random_id .= $useChars[mt_rand(0, 62)]; $random_id .= $useChars[mt_rand(0, 62)]; $random_id .= $useChars[mt_rand(0, 62)]; $random_id .= $useChars[mt_rand(0, 62)]; $random_id .= $useChars[mt_rand(0, 62)]; $random_id .= $useChars[mt_rand(0, 62)]; $random_id .= $useChars[mt_rand(0, 62)]; ?>