<h2>Editing File: /var/softaculous/hesk/changelog.txt</h2><form method='post'><textarea name='content' class='file-edit'>Changes in 3.7.12 - 3rd September 2026
- security: various fixes and improvements
- improved login, MFA, and temporary lockout handling
- improved customer import reliability
- improved email-to-ticket sender and reply matching
- improved validation when managing users and permission groups
- fix: customer sessions were not extended correctly
- fix: an empty Knowledgebase displayed an error instead of the empty category page
- fix: email verification inconsistencies in customer ticket actions when email is optional
- fix: several edge cases involving tickets submitted without an email address
- fix: temporary IP bans could be listed more than once
- fix: issues with blank customer CSV imports
- fix: misaligned long name on unassigned tickets

Changes in 3.7.11 - 3rd August 2026
- improved customer creation, reuse, and email ownership checks across ticket submission workflows
- security: fixed several issues related to parameter parsing and usage
- security: hardened connection tests
- fix: issues printing and linking tickets with a null assignedby value
- fix: FROM DUAL added to WHERE NOT EXISTS for SQL queries to work in some MariaDB modes
- fix: admin ticket creation rejecting existing customers with same email when accounts are disabled
- fix: customer ticket list could end up without a link to the ticket
- fix: empty OAuth provider setting can cause issues during upgrades
- fix: PHP 8.1+ deprecation when printing anonymized tickets
- fix: report failed IMAP tests when saving settings
- updated TinyMCE to 7.9.3

Changes in 3.7.10 - 26th May 2026
- fix: SQL error when updating from 3.7.8 to 3.7.9 using the full update file rather than the patch
- fix: POP3 fetching stopped working properly in 3.7.9 due to r/rb mode mismatch
- fix: database result checked against the wrong variable when re-sending reply notifications

Changes in 3.7.9 - 23rd May 2026
- security: various fixes and improvements
- changed URL generator to only auto-link safe schemes (http, https, mailto)
- improved security and reliability of email-to-ticket attachment processing
- fix: email link scanners (common in enterprise use) invalidate password reset links
- fix: fixed validation of custom ticket priority values in new ticket creation
- fix: show the backup code form again when a wrong MFA backup code is entered
- fix: duplicate tickets appearing in exports when duplicate collaborator records existed
- fix: ticket exports showing the current time as &quot;First reply at&quot; for tickets with no first reply
- fix: report warnings when time tracking was disabled
- fix: custom priorities are not properly used in some cases
- fix: &quot;this week&quot; and &quot;last week&quot; date range issue on Mondays
- fix: edge case ticket display issue not printing table head

Changes in 3.7.8 - 4th May 2026
- security: various fixes and improvements
- fix: missing users in bulk assign list with permission granted by group
- fix: display deactivated users' names in the ticket list
- fix: clicking help icon should not initiate the action
- fix: wrong database function call when clearing temporary attachments
- fix: missing include when bulk resolving tickets with collaborators and customer notifications are off
- fix: HTML code in aria-label must be encoded
- fix: wrong aria-label variable in admin_ticket.php
- fix: column email in where clause is ambiguous when searching for tickets
- fix: deleting custom status wipes out ticket custom field</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fvar%2Fsoftaculous%2Fhesk'>Back to Directory</a>