Version 2020.1.1

• BUGFIX: Fixed potential XSS exploit in User Agent parameter

Version 2020.1.0

• HESK 2.8.6 support
• Dropped support for HESK 2.8.4
• BUGFIX: Fixed potential SQL injection and XSS vulnerability, reported by loca1gh0st

Version 2019.1.0

• HESK 2.8.4 Support
• Dropped support for HESK 2.8.2
• BUGFIX: Fixed issue where some users would encounter "Error Code: 151" when trying to install
• BUGFIX: Fixed issue where %%HESK_OWNER%% would not work in canned responses
• BUGFIX: Fixed issue where Microsoft Office documents would not appear inline.
• BUGFIX: Fixed issues with the ticket attachments REST API
• BUGFIX: Fixed issue where inserting tickets when using email validation could fail
• BUGFIX: Fixed encoding issue when re-sending email notifications
• BUGFIX: Fixed issue where "Click to Add Event" text was not localized
• Datepicker calendar can now be localized
• Bootswatch themes can now be used on the front-end via the "UI Colors" settings section
• Improved visibility of the tickets dropdown when in mobile view
• Category Groups
  • Category Groups allow you to group multiple categories into a common group. For example, "Password Resets" and "Active Directory Changes" could be grouped into a "Security" group
  • Groups can be nested inside other category groups
  • Groups do not have any security associated with them. Users can see a category group so long as they can see at least one category in the category group
  • Categories do not have to be assigned to a category group

Version 2018.2.0

• Support for HESK 2.8.2. Dropped support for HESK 2.8.1
• BUGFIX: Fixed issue where PHP code would appear when searching for tickets
• BUGFIX: Fixed issue where "*" was missing in a piece of help text on the submit ticket page
• BUGFIX: Fixed issue where emails would display header information instead of the actual message
• BUGFIX: Fixed issue where validator would mark email as required when "require email" was set to no
• BUGFIX: Fixed issue where invisible reCAPTCHA would not work
• Removed help files from download as Mods for HESK doesn't update them
• Added "Can change ticket due date" permission for users. This permission is disallowed by default (update your permission groups and users to add permission as necessary)
• FontAwesome and Leaflet no longer rely on external CDNs

Version 2018.1.0

• Support for HESK 2.8.1. Dropped support for HESK 2.7.6
• BUGFIX: Fixed issue with create ticket API where tickets could not be created
• BUGFIX: Fixed issue with create ticket API where autoassign logic would not respect the category's autoassign setting
• BUGFIX: Fixed issue on the manage categories page where the colors from the previous category being edited would be applied to the next category
• BUGFIX: Fixed issue on service messages page where service messages may not load
• BUGFIX: Fixed PHP notice on manage email templates page
• BUGFIX: Fixed issue on calendar page where the audit log date would be stored as 0000-00-00 00:00:00 when using a non-MySQL standard date format
• BUGFIX: Fixed issue where administrators could only see tickets assigned to themselves on the calendar page
• BUGFIX: Fixed issue where selected categories/features when creating a new user did not match the staff permission group's permissions
• BUGFIX: Fixed issue where change due date button would be visible on a ticket when the user did not have permission to change the due date
• User security changes regarding permission groups, categories, and users:
  • If a user can manage categories AND permission groups, the user can now assign any category to a permission group
  • If a user can manage categories AND users, the user can now assign any category to a user
• Users who can manage permission groups and users can now assign a permission group to a user, as long as the permission group has equal or less access than their current permissions
• Mods for HESK language strings have been removed from text.php and are now in a separate text-mfh.php file. This change has been made to facilitate the translation system changes at https://mods-for-hesk.com (see below for more information).

Version 3.3.1

Version 3.3.1 has been released, available for download at https://mods-for-hesk.com. Bugfixes:

• BUGFIX: Fixed issue where some strings were not translated on the service messages page
• BUGFIX: Fixed issue where business hours were improperly appearing on the customer calendar page
• BUGFIX: Fixed issue where TinyMCE version was incorrect on the staff pages
• BUGFIX: Fixed issue where autoassign would always be disabled when creating/editing a category
• BUGFIX: Fixed issue where ticket due date could not be changed on the view ticket page

Version 3.3.0

Version 3.3.0 has been released, available for download at https://mods-for-hesk.com. Changes and bugfixes:

• BUGFIX: Inactive users can no longer be the recipient of a private message
• BUGFIX: Cc / Bcc email custom fields send emails again
• BUGFIX: Fixed issue where custom field descriptions for select boxes would be forgetful and not display
• BUGFIX: Fixed an issue where users running 3.0.0 Beta 1 or 3.0.0 RC 1 could not upgrade
• BUGFIX: Users can no longer go on a power trip and create a permission group with more permissions than they have
• BUGFIX: Fixed a portion of the installer that would fail when going in the "down" direction
• BUGFIX: Fixed issue where an error could occur when trying to re-send an email
• Added some failsafe checks on a migration when setting up statuses
• Improved the database validator (bundled with the installer) to only fail checks if the user has installed the necessary version of Mods for HESK
• A setting has been added to highlight all ticket rows based on the priority (by default high and critical priority tickets are highlighted)
• The "Home" tab on the staff panel has been renamed to "Tickets" (as only tickets are shown on the page)
• A couple small improvements to the calendar have been made
  • Partial day events can now have their start times hidden (via Helpdesk Settings)
  • Business hours have been added on the settings page. This does not add any new functionality, but the business hours will be indicated on the day/week views (defaults to 00:00 - 23:59)
  • Events now have audit trails. They can be viewed by clicking the "history" tab.
  • Tickets on the calendar now show its status on the popover
• Due dates for tickets are now visible on the ticket list (finally!)
• Improvements to service messages
  • Service messages can now be shown on multiple locations (up to 11 locations)
  • Service messages can be limited to a specific language
• Attachments now show their size on the ticket page
• A "Go Back" button has been added to the login page for easier access to the helpdesk homepage
• HESK 2.7.6 support
• Dropped support for HESK 2.7.5
• New REST API endpoints are available for use. Consult the REST API documentation for more information.
  • /v1/service-messages (GET, POST, PUT, DELETE)
  • /v1/calendar/business-hours (GET)
  • /v1/calendar/events (GET)
  • /v1/calendar/events/staff (GET, POST, PUT, DELETE)
  • /v1/staff/tickets/{ticketId}/due-date (PATCH)

3.2.5

• BUGFIX: Fixed issue where some PHP installations would have issues retrieving request headers
• BUGFIX: Fixed issue where emails would not send from the REST API when using phpmail() or SMTP

Version 3.2.4

• HESK 2.7.5 compatibility
• BUGFIX: Ticket timeline will be in the correct order if messages are sorted newest to oldest
• BUGFIX: Fixed issue where ticket reply dates could be improperly stored

Version 3.2.3

• BUGFIX: Audit events (status change, category change, etc) will now longer show Nov 30, 0001 when using a time format that MySQL doesn't like (note: any previous events [i]will[/i] continue to show this due to how the incorrect data is stored in the database).
• BUGFIX: Clicking "edit post" or "delete post" on a reply will edit/delete the reply instead of the entire ticket.