Jump to content

Leaderboard

Popular Content

Showing content with the highest reputation on 06/23/2015 in all areas

  1. Hi, The integrated support manager in Blesta is very nice. BUT : if you enable the plugin, then you need to disable many mod_security / naxsi rules just to be able to post a couple of lines in a ticket. Customers want to send very long codes, and you may ask them to send stuff like email sources, debug codes, etc... It can take a lot of time and efforts before you get a stable and secure set of mod_security / naxsi rules. We all know blesta is very secure, but it's always better to use an application firewall, like mod_security or naxsi. However, doing this can turn into a nightmare. While trying to submit codes, or any other content with special characters, your customers may see 503 error codes. That's not beautiful Some peoples may end up by doing stupid things like completely disabling mod_security while they should not. Other peoples will simply start disabling everything they see in the logs. They may disable too many rules, or whitelist too many ip's. I found a very good way to avoid 503 errors, while keeping most of your naxsi / mod_security rules intact. With theses little changes in your files, your customers will be able to copy/paste and type everything they want in a ticket textfield or subject line, and you won't need to disable all your rules. I can use the support manager plugin with only a couple rules disabled, in fact. You can re-enable most of your rules for the support plugin paths, by doing this : 1) Go to the support_manager plugin folder and open /views/default/client_tickets_reply.pdt Add the following at the end of the file, just after the ?> <script>function deleteextra() { var initVal = $(this).val(); outputVal = initVal.replace(/[^0-9a-zA-Z\n\/'@-]/g," "); if (initVal != outputVal) { $(this).val(outputVal); } }; $().ready(function(){ $("#summary").keyup(deleteextra).blur(deleteextra); $("textarea").keyup(deleteextra).blur(deleteextra); }); </script> 2) do the same in client_tickets_add.pdt And voilà You are now able to use mod_security with the support manager, on client side - you may also do the same on the admin side (in admin_tickets_add.pdt and admin_tickets_reply.pdt) What it does? When a customer will copy and paste, or type something in the ticket reply or ticket add textarea the unwanted special characters will just disappear before the ticket is submitted. It will only keep the following : @.-_ It will also remove the http:// and https:// before an url, to make sure your staff won't click on any link by mistake. i love jquery! You may want to adapt the regex to your requirements, but this work fine for us. I hope this will help someone!
    2 points
  2. DNS Are Missing? Not more.
    2 points
  3. I have clients with services running that I auto debit them for every month. But for one-off jobs, I want to invoice them for deposit but not automatically debit their credit card at that time. (They may also wish to pay by cheque, etc) I would like to add a method by which a specific invoice can be made exempt for auto debit. This option could be selected during invoice creation or edit and would prevent auto debit from running against it. At such time the quote is approved for payment, I could then go in and manually debit the payment account.
    1 point
  4. Thanks! Looking forward to installing 3.5 final then. :-)
    1 point
  5. The license is valid and has 1 addon company.
    1 point
  6. Yes, under Packages > Order Forms, edit your order form. Uncheck "Require Manual Review and Approval of All Orders". Under Packages > Order Forms Settings tab, if you are using Anti-Fraud it may go into review if it meets a certain threshold, so just check your settings.
    1 point
  7. The service is probably "in-review". Go to the Billing > Overview page and check that the order was approved through the Orders widget. If the order is approved, then the service will be "pending" and should appear on their client profile page under pending services.
    1 point
  8. Yes, or by creating another account for that client for the purposes of manual invoices that should not be auto debited. I would like to add a method by which a specific invoice can be made exempt for auto debit. This option could be selected during invoice creation or edit and would prevent auto debit from running against it. If this sounds good, please start a feature request thread so we can get some feedback from the community and plan the feature.
    1 point
  9. Nope, not compatible. You will need 3.5. The good news is, you'll be able to upgrade to 3.5 soon as we're nearing the official release.
    1 point
  10. Your Wish, My Command. Enjoy
    1 point
  11. i will finich my new cpanel reloaded module , is based in the original cpanel . i will send it yo you to check it , i don't care about the right of the module, what i want is just offer something strong to the community . if you accept of course .
    1 point
×
×
  • Create New...