<?xml version="1.0" encoding="UTF-8"?>        <rss version="2.0"
             xmlns:atom="http://www.w3.org/2005/Atom"
             xmlns:dc="http://purl.org/dc/elements/1.1/"
             xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
             xmlns:admin="http://webns.net/mvcb/"
             xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
             xmlns:content="http://purl.org/rss/1.0/modules/content/">
        <channel>
            <title>
									Bugs and display issues - osTicket Awesome Forums				            </title>
            <link>https://osaweso.me/community/bugs/</link>
            <description>osTicket Awesome Discussion Board</description>
            <language>en-US</language>
            <lastBuildDate>Thu, 02 Jul 2026 00:52:17 +0000</lastBuildDate>
            <generator>wpForo</generator>
            <ttl>60</ttl>
							                    <item>
                        <title>MergedEvent crashes on PHP 8 when agent name contains URL-encoded characters</title>
                        <link>https://osawesome.com/community/bugs/mergedevent-crashes-on-php-8-when-agent-name-contains-url-encoded-characters/</link>
                        <pubDate>Tue, 23 Jun 2026 08:17:37 +0000</pubDate>
                        <description><![CDATA[Environment:

osTicket-1.18.3-Awesome-104
PHP 8.3.6

When viewing a ticket containing merged child tickets, osTicket throws a fatal PHP error:PHP Fatal error: Uncaught ValueError: Unkno...]]></description>
                        <content:encoded><![CDATA[<p>Environment:</p>
<ul>
<li><span>osTicket-1.18.3-Awesome-104</span></li>
<li>PHP 8.3.6</li>
</ul>
When viewing a ticket containing merged child tickets, osTicket throws a fatal PHP error:<br /><br />PHP Fatal error: Uncaught ValueError: Unknown format specifier "C"<br /><br />The error originates from:<br /><br /><br />
<pre contenteditable="false">include/class.thread.php

class MergedEvent extends ThreadEvent {
function getDescription($mode=self::MODE_STAFF) {
return sprintf(
$this-&gt;template(
__('{somebody} merged this ticket with %s{data.id}%s{data.ticket}%s {timestamp}'),
$mode
),
'', ''
);
}
}</pre>
<p><br />Stack trace points directly to the sprintf() call.<br /><br />Root Cause:<br />The {somebody} placeholder is expanded before sprintf() is executed.<br /><br />In our installation the merged event was created by an agent named:<br /><br />Casper F. Sørensen<br /><br />The generated HTML contains an avatar URL with URL-encoded characters:<br /><br />name=Casper+F.+S%C3%B8rensen<br /><br />After placeholder substitution, sprintf() receives a string containing:<br /><br />%C3%B8<br /><br />PHP 8 interprets "%C" as a format specifier and throws:<br /><br />ValueError: Unknown format specifier "C"<br /><br />This causes the entire ticket thread rendering to fail.<br /><br />Example Debug Output:<br />Template result:<br /><br />&lt;img class="avatar" ... name=Casper+F.+S%C3%B8rensen" /&gt;Casper F. Sørensen<br />merged this ticket with 344<br />Ticket #S416<br /><br />Expected Behavior:<br />Merged ticket events should render correctly regardless of agent names containing non-ASCII characters such as:<br /><br />ø<br />æ<br />å<br />ü<br />é<br />etc.<br /><br />Actual Behavior:<br />Ticket thread rendering fails with a fatal PHP error.<br /><br />Suggested Fix:<br />Avoid using sprintf() after placeholder expansion.<br /><br />One possible approach:<br /><br />Build the link placeholders before template rendering.<br />Use str_replace() instead of sprintf().<br />Escape literal percent signs before passing strings to sprintf().<br /><br />For example:<br /><br /></p>
<pre contenteditable="false">return str_replace(
array('LINK_START', 'LINK_MID', 'LINK_END'),
array('', ''),
$this-&gt;template(__($raw), $mode)
);</pre>
<p><br />Impact:<br />Any merged ticket can become unreadable when the merge event was performed by an agent whose display name results in URL-encoded percent sequences being present in the rendered HTML.<br /><br />This appears to be a PHP 8 compatibility issue rather than a localization or theme issue.</p>]]></content:encoded>
						                            <category domain="https://osaweso.me/community/bugs/">Bugs and display issues</category>                        <dc:creator>Carsten Bækmand</dc:creator>
                        <guid isPermaLink="true">https://osawesome.com/community/bugs/mergedevent-crashes-on-php-8-when-agent-name-contains-url-encoded-characters/</guid>
                    </item>
				                    <item>
                        <title>Creating ticket from thread wherein they are totally unrelated</title>
                        <link>https://osawesome.com/community/bugs/creating-ticket-from-thread-wherein-they-are-totally-unrelated/</link>
                        <pubDate>Fri, 15 May 2026 00:49:19 +0000</pubDate>
                        <description><![CDATA[It creates new ticket from thread wherein they are totally another user and topic.
&nbsp;Screenshot-2026-05-15-084840.png]]></description>
                        <content:encoded><![CDATA[<p>It creates new ticket from thread wherein they are totally another user and topic.</p>
<div id="wpfa-135796" class="wpforo-attached-file"><a class="wpforo-default-attachment" href="//osawesome.com/wp-content/uploads/wpforo/default_attachments/1778806159-Screenshot-2026-05-15-084840.png" target="_blank" title="Screenshot-2026-05-15-084840.png"><i class="fas fa-paperclip"></i>&nbsp;Screenshot-2026-05-15-084840.png</a></div>]]></content:encoded>
						                            <category domain="https://osaweso.me/community/bugs/">Bugs and display issues</category>                        <dc:creator>servo</dc:creator>
                        <guid isPermaLink="true">https://osawesome.com/community/bugs/creating-ticket-from-thread-wherein-they-are-totally-unrelated/</guid>
                    </item>
				                    <item>
                        <title>Custom columns | Text overflow clipping not working</title>
                        <link>https://osawesome.com/community/bugs/custom-columns-text-overflow-clipping-not-working/</link>
                        <pubDate>Fri, 03 Apr 2026 00:52:56 +0000</pubDate>
                        <description><![CDATA[Hello,
There seems to be an issue when trying to utilize the custom column text overflow behavior options (Text wrap, Clipping, etc.), specifically the text clipping option.
Attached are the...]]></description>
                        <content:encoded><![CDATA[Hello,
There seems to be an issue when trying to utilize the custom column text overflow behavior options (Text wrap, Clipping, etc.), specifically the text clipping option.
Attached are the OSTA and native osTicket displays.
Also the preview tab would be a great addition.
Thank you in advance.<img src="https://osticketawesome.com/wp-content/uploads/hm_bbpui/25431/4f1nnf4heok0aerqtyvb2tmfy0d8tdyo.png" alt="osta-view" />&nbsp;<img src="https://osticketawesome.com/wp-content/uploads/hm_bbpui/25431/x6wt7wky6up54sp8xja8t3t33asn2xck.png" alt="osticket-view" />]]></content:encoded>
						                            <category domain="https://osaweso.me/community/bugs/">Bugs and display issues</category>                        <dc:creator>Daniel Rosta</dc:creator>
                        <guid isPermaLink="true">https://osawesome.com/community/bugs/custom-columns-text-overflow-clipping-not-working/</guid>
                    </item>
				                    <item>
                        <title>Client reply editor builds invalid draft URL (.../ajax.php/draft/.../index.php)</title>
                        <link>https://osawesome.com/community/bugs/client-reply-editor-builds-invalid-draft-url-ajax-php-draft-index-php/</link>
                        <pubDate>Mon, 30 Mar 2026 02:59:12 +0000</pubDate>
                        <description><![CDATA[]]></description>
                        <content:encoded><![CDATA[]]></content:encoded>
						                            <category domain="https://osaweso.me/community/bugs/">Bugs and display issues</category>                        <dc:creator>Carsten Bækmand</dc:creator>
                        <guid isPermaLink="true">https://osawesome.com/community/bugs/client-reply-editor-builds-invalid-draft-url-ajax-php-draft-index-php/</guid>
                    </item>
				                    <item>
                        <title>Task creation from ticket fails when Department is not selected (missing require</title>
                        <link>https://osawesome.com/community/bugs/task-creation-from-ticket-fails-when-department-is-not-selected-missing-require/</link>
                        <pubDate>Wed, 25 Mar 2026 12:28:23 +0000</pubDate>
                        <description><![CDATA[]]></description>
                        <content:encoded><![CDATA[]]></content:encoded>
						                            <category domain="https://osaweso.me/community/bugs/">Bugs and display issues</category>                        <dc:creator>Carsten Bækmand</dc:creator>
                        <guid isPermaLink="true">https://osawesome.com/community/bugs/task-creation-from-ticket-fails-when-department-is-not-selected-missing-require/</guid>
                    </item>
				                    <item>
                        <title>Dark mode no longer working, except for in the header</title>
                        <link>https://osawesome.com/community/bugs/dark-mode-no-longer-working-except-for-in-the-header-125278/</link>
                        <pubDate>Sun, 15 Mar 2026 16:59:13 +0000</pubDate>
                        <description><![CDATA[Hello,

Since I updated form 1.18.2 to 1.18.3 (rev4), the ticket list is no longer in dark mode.

I tried in a IN PRIVATE session, disabling/enabling dark mode.

osTicket v1.18.3 // osTicket...]]></description>
                        <content:encoded><![CDATA[Hello,

Since I updated form 1.18.2 to 1.18.3 (rev4), the ticket list is no longer in dark mode.

I tried in a IN PRIVATE session, disabling/enabling dark mode.

osTicket v1.18.3 // osTicket-1.18.3-Awesome-104

PHP 8.3.30 // MySQL 8.0.45 // Apache web server

Thank you.]]></content:encoded>
						                            <category domain="https://osaweso.me/community/bugs/">Bugs and display issues</category>                        <dc:creator>cglmicro</dc:creator>
                        <guid isPermaLink="true">https://osawesome.com/community/bugs/dark-mode-no-longer-working-except-for-in-the-header-125278/</guid>
                    </item>
				                    <item>
                        <title>In the dialog box to open a new ticket, new fields are NOT opened.</title>
                        <link>https://osawesome.com/community/bugs/in-the-dialog-box-to-open-a-new-ticket-new-fields-are-not-opened-125258/</link>
                        <pubDate>Sun, 15 Mar 2026 08:05:07 +0000</pubDate>
                        <description><![CDATA[In the dialog box to open a new ticket, new fields are NOT opened.

After create new ticket this error shows.

&quot;Unable to create a ticket. Correct any errors below and try again.&quot;

And the r...]]></description>
                        <content:encoded><![CDATA[In the dialog box to open a new ticket, new fields are NOT opened.

After create new ticket this error shows.

"Unable to create a ticket. Correct any errors below and try again."

And the required fields "Ticket Details" is present and now possible to create the ticket.

V. 1.18.3 Firefox and Opera tested. Same problem on both!

&nbsp;

-Roger-

&nbsp;

&nbsp;

&nbsp;

&nbsp;]]></content:encoded>
						                            <category domain="https://osaweso.me/community/bugs/">Bugs and display issues</category>                        <dc:creator>Roger Iverin</dc:creator>
                        <guid isPermaLink="true">https://osawesome.com/community/bugs/in-the-dialog-box-to-open-a-new-ticket-new-fields-are-not-opened-125258/</guid>
                    </item>
				                    <item>
                        <title>CC users not visible when selecting multiple users</title>
                        <link>https://osawesome.com/community/bugs/cc-users-not-visible-when-selecting-multiple-users-125185/</link>
                        <pubDate>Sat, 07 Mar 2026 22:30:09 +0000</pubDate>
                        <description><![CDATA[I have just updated to version 104, and when I create a new ticket and select multiple users in the input field cc_users_open, I am not able to see all the users I have selected. As a result...]]></description>
                        <content:encoded><![CDATA[I have just updated to version 104, and when I create a new ticket and select multiple users in the input field cc_users_open, I am not able to see all the users I have selected. As a result, the users are listed outside of the input field.

This line of CSS from staff-desktop.css appears to be causing the issue:

.tickets-page .tickets .form_table .select2-container--default .select2-selection--multiple {
height: 32px !important;
}]]></content:encoded>
						                            <category domain="https://osaweso.me/community/bugs/">Bugs and display issues</category>                        <dc:creator>Carsten Bækmand</dc:creator>
                        <guid isPermaLink="true">https://osawesome.com/community/bugs/cc-users-not-visible-when-selecting-multiple-users-125185/</guid>
                    </item>
				                    <item>
                        <title>Avatar initials generation fails as size parameter is empty in url</title>
                        <link>https://osawesome.com/community/bugs/avatar-initials-generation-fails-as-size-parameter-is-empty-in-url-125044/</link>
                        <pubDate>Thu, 19 Feb 2026 01:33:50 +0000</pubDate>
                        <description><![CDATA[When using the Initials avatar mode in osTicket Awesome theme, the avatar generation fails with a fatal error:

Fatal error: Uncaught ValueError: imagecreatetruecolor(): Argument #1 ($width)...]]></description>
                        <content:encoded><![CDATA[When using the Initials avatar mode in osTicket Awesome theme, the avatar generation fails with a fatal error:

Fatal error: Uncaught ValueError: imagecreatetruecolor(): Argument #1 ($width) must be greater than 0

<strong>Root cause</strong><strong>:</strong>

The LocalAvatar::getUrl() method only adds the size parameter to the URL when $this-&gt;size is truthy. However, when getAvatar() is called without a size parameter (e.g., &lt;?php echo $user-&gt;getAvatar(); ?&gt; in templates), $this-&gt;size becomes an empty string "" rather than null.

When the empty string is passed to the avatar URL, PHP's&nbsp;(int) ""&nbsp;converts it to&nbsp;0, which the GD library's&nbsp;imagecreatetruecolor()&nbsp;cannot accept.

Example problematic URL: avatar.php?uid=1&amp;mode=initials&amp;size=&amp;name=Casper+

We are running 1.8.3]]></content:encoded>
						                            <category domain="https://osaweso.me/community/bugs/">Bugs and display issues</category>                        <dc:creator>Carsten Bækmand</dc:creator>
                        <guid isPermaLink="true">https://osawesome.com/community/bugs/avatar-initials-generation-fails-as-size-parameter-is-empty-in-url-125044/</guid>
                    </item>
				                    <item>
                        <title>Security issue?</title>
                        <link>https://osawesome.com/community/bugs/security-issue-124794/</link>
                        <pubDate>Tue, 17 Feb 2026 08:50:24 +0000</pubDate>
                        <description><![CDATA[Dear all,&nbsp;

we are running the newest version of osticketawesome 1.18.3 on the sitewith great success, but have received a warning message from our hosting provider:

---- in German (se...]]></description>
                        <content:encoded><![CDATA[Dear all,&nbsp;

we are running the newest version of osticketawesome 1.18.3 on the site https://ticket.edudigital.schule with great success, but have received a warning message from our hosting provider:

---- in German (see translation below) ----

Sehr geehrte Damen und Herren,

durch einen Routinescan wurde Malware auf Ihrem Webspace Account "edudigital.schule" gefunden:

public_html/
./os/osta/opt/language/language-bar.php &nbsp;#1
./os/osta/opt/logo/delete/logo-options.php &nbsp;#1
./os/osta/opt/text/choose-mobile-link.php &nbsp;#1
./os/osta/opt/text/choose-mobile-text.php &nbsp;#1
./os/osta/opt/text/choose-subtext.php &nbsp;#1
./os/osta/opt/text/delete/choose-theme.php &nbsp;#1

Malware Signatures:

#1 WEBSHELL_PHP_Writer 

Wichtige Hinweise zu dieser Liste:
Der mit # gekennzeichnete Teil hinter dem Dateinamen referenziert mit Nummer auf die weiter unten in der Liste gefundenen Malware Signaturen.
Der bösartige Code kann zum Teil in reguläre Dateien Ihrer Website eingeschleust worden sein.
Bitte beachten Sie, dass diese Liste keinen Anspruch auf Vollständigkeit erhebt und auch Dateien enthalten kann, deren Inhalt fälschlicherweise als Malware eingestuft wurde.

Upload der entsprechenden Dateien geschah vermutlich über die Verwaltungsoberfläche Ihrer CMS Installation.

Wir haben von einer Sperrung des Accounts abgesehen.

Bitte reinigen Sie Ihren Account gründlich indem Sie die genannten Dateien löschen oder säubern.
Danach spielen Sie bitte ein Update der auf dem Account installierten Software auf die neuste Version ein und ändern Sie alle (!) Passwörter der Website.
Dies beinhaltet das Datenbank-Passwort, Benutzer-Passwörter sowie Administratoren-Passwörter.
Um alle Sicherheitslücken Ihrer Website zu identifizieren und zu schließen oder um das vorhandene Setup zu härten, schlagen wir Ihnen vor, sich an einen Webentwickler zu wenden.

--- translated version ---

English translation:

Dear Sir or Madam,

During a routine scan, malware was detected on your webspace account “edudigital.schule”:

public_html/
./os/osta/opt/language/language-bar.php #1
./os/osta/opt/logo/delete/logo-options.php #1
./os/osta/opt/text/choose-mobile-link.php #1
./os/osta/opt/text/choose-mobile-text.php #1
./os/osta/opt/text/choose-subtext.php #1
./os/osta/opt/text/delete/choose-theme.php #1

Malware signatures:

#1 WEBSHELL_PHP_Writer 

Important notes regarding this list:
The number marked with # after each file name refers to the malware signature listed further below.
Malicious code may, in some cases, have been injected into otherwise legitimate files on your website.
Please note that this list does not claim to be complete and may also include files whose contents were falsely identified as malware.

The upload of the affected files most likely occurred via the administration interface of your CMS installation.

We have refrained from suspending the account.

Please thoroughly clean your account by deleting or cleaning the files listed above.
Afterwards, please update all software installed on the account to the latest version and change all website passwords.
This includes the database password, user passwords, and administrator passwords.

To identify and close all security vulnerabilities on your website, or to harden the existing setup, we recommend contacting a web developer.

--- end of translation ---

&nbsp;

We hardened the opt directory with a .htaccess so that all events to call the php-files directly are blocked (which was possible before). What else would you advise? Is this an issue that should be addressed in a more profound way?

Kind regards,

Michael Schnirch

Kreismedienzentrum Freiburg
www.kmz-freiburg.de]]></content:encoded>
						                            <category domain="https://osaweso.me/community/bugs/">Bugs and display issues</category>                        <dc:creator>Sebastian Lorenz</dc:creator>
                        <guid isPermaLink="true">https://osawesome.com/community/bugs/security-issue-124794/</guid>
                    </item>
							        </channel>
        </rss>
		