KB Support – WordPress Help Desk and Knowledge Base <= 1.6.6 – Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions:

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/kb-support/kb-support-wordpress-help-desk-and-knowledge-base-166-missing-authorization-to-authenticated-subscriber-multiple-administrator-actions


Hello, are you addressing this issue reported by WordFence?

Additionally, there is a problem in your latest version 1.7.0. where output is starting in form-functions.php on line 1 of the KB Support plugin. This early output prevents other parts of WordPress and plugins from modifying headers or starting sessions correctly.

PHP Warning: Cannot modify header information - headers already sent by (output started at /path/to/kb-support/includes/forms/form-functions.php:1) in /path/to/IXR-server.php on line 144

This causes heavy interventions with other plugins not working properly, resolve the whitespace issue.




Both problems are quite serious and require your urgent attention.

• This topic was modified 1 month, 1 week ago by countermind91.
• This topic was modified 1 month, 1 week ago by countermind91.

Hi!

I wanted to report that, since v1.7.0, this plugin breaks the license renewal/new payments links in Easy Digital Downloads Software Licensing plugin.

Steps to reproduce the issue:

• Rollback to KB Support v1.68 on a system with Easy Digital Downloads and Software Licensing installed and configured.
• Follow any license renewal links in a private window, e.g. https://yourdomain.com/checkout/?nocache=true&edd_license_key=123456789&download_id=1234
• You should now see a checkout page, with the product’s details, user personal fields to fill, and a link to buy make the pay vía paypal
• Now, update to KB Support v1.7.0 on that same system and follow the same steps.
• You’ll see that you get a “Your cart is empty” message on screen and you’re unable to continue checkout.

I only just found out about it. Hopefully this can be resolved. In the meantime, I will stay on version 1.6.8. Thanks in advance!

• This topic was modified 1 month, 1 week ago by pacoelflaco.

Hello, after the update the ticket statuses disappeared. I cannot see the ticket status of customers. Also, closed tickets still appear to be open.

This plugin has been closed as of March 7, 2024 and is not available for download. This closure is temporary, pending a full review.

www.ads-software.com

Any news on this?

When adding a custom Label Class or Input Class, will add additional quotemarks.

For example, adding ticketLabel in the form builder will generate the following code:

<label for="kbs-first-name" class="&quot;ticketLabel&quot;">

I have KB Support installed, and did the upgrade to the latest version. I do NOT have more than 3 tickets in my database.

I have clicked “Start Upgrade” and “Update Ticket Numbers” over and over and nothing happens.

Also – the dashboard widget never loads.

Hi,

This looks like a great plugin, but I don’t know if I did something wrong. I have not been able to find a page where I can do my agent setup.

I’ve visited the WP Users page and see a bunch of new user roles – but because I had another support plugin I don’t know which roles are for KB Support.

Please advise – kind of lost

It’s for a MultiSite WordPress with subdomains.

Hello, I’m unable to submit form due to the photo upload not working. After I’ve filled the form and click the submit button, it says “Upload Photo is a required field”. Please I need help with that. How can I allow the Ticket Manager Page to show all the form contents. Also, the Send Email Test not working. I’m not receiving any emails.

• This topic was modified 1 year, 3 months ago by dixre.

All of a sudden none of my forms are working.

“An internal error has occurred, please try again or contact support”

Console shows json reply “kbs-email-address” which I have mapped to customer email, I have also unmapped it and left it blank and type it, neither way works.

Everything was fine until today! Disk space is not full, have restarted httpd.

Any ideas please?

Hi team,

I tried to log in to my account over at your website and it doesn’t work. It just reloads the login page. I have a purchase in there, by the way.

I tried to submit a ticket and it says “security failed”.

A customer submitted a ticket on our website and the text overflows. See screenshot for how it looks. This is a first, I believe.

https://ibb.co/pjnDVTY

Screenshot will auto-delete in 2 months. You can ignore the black bar :). Text is blurred for privacy.

I verified older tickets and they looked fine so it’s not your recent update.

First of all I would like to thank you guys for building such a robust plugin, I’m almost there setting up all I need, but now I want to know is there a way where the guest users can view the tickets list of all the other guests without login/registration ? Thanks in advance!

Hello,

In the function “kbs_setup_kbs_ticket_tag_taxonomy()” you have this line of code:

'search_items' => sprintf( esc_html__( 'Search %s Tags', 'kb-support' ), kbs_get_ticket_label_singular() ),

When you change the language to Spanish in the backend, that line of code becomes:

sprintf('Buscar Etiqueta…', 'Ticket')

It triggers a fatal error because the Spanish translation of ‘Search %s Tags’ misses the %s.

I suggest you be sure all the translations have the format specifier required by the function sprintf.

In my case, it triggers a fatal error in the backend because of a bad translation.

Here what I find in the debug.log file:

[01-Jan-2023 18:09:30 UTC] PHP Fatal error: Uncaught ValueError: Missing format specifier at end of string in /Users/josemortellaro/Sites/plugins/wp-content/plugins/kb-support/includes/post-taxonomies.php:76

And the backend shows a white screen of death. So the issue is serius.
In my case I have solved it, this thread is just for making you aware of this issue.

I hope it helps.

Have a great day!

Jose

Hello, first of all kudos for this amazing plugin!

Would it be possible in the file templates/view-ticket.php at line 214 https://plugins.trac.www.ads-software.com/browser/kb-support/tags/1.5.84/templates/view-ticket.php#L214 to replace this line of code

echo wp_kses_post( $reply_content );

with this one?:

echo wp_kses_post( apply_filters( 'kbs_reply_content',$reply_content ) );

I mean, can you please provide a filter hook for the reply content? Without that filter in my case, it’s not possible to display the reply content in a proper way.
In my specific case, I think one of the other plugins on my installation removes the wpautop. So, this is not a bug of your plugin, but a filter hook would help a lot in solving issues caused by other plugins.

I need to restore wpautop to the reply content, but I would need a filter to do that.

This custom code would solve my problem:

add_filter( 'kbs_reply_content','wpautop',999999999 );

I can imagine also in other situations other users may need to filter the reply content. Would it be a problem for you to provide that filter?

Thank you in any case for your amazing plugin.

Best regards

Jose

Hi, im getting the following message – which does not go away when i click upgrade and get redirected to the plugin dashboard page where i can see the news about the plugin. Any idea whats happening here? (image of the message: https://imgur.com/a/8ZvUWRi ). I have no plugin to update, even the Database is updated – checked it …/wp-admin/upgrade.pgp

KB Support needs to complete an upgrade that was previously started. Click?here?to resume the upgrade.

• This topic was modified 1 year, 11 months ago by evalast.

Hi – just created a page after installing the plugin with two shortcodes in it:

[kbs_search]
[kbs_articles]

Unfortunately the search function does NOT only return results from the articles custom post type – it also returns some posts of my default post tpye despite the search url looks like:
?s=restaurant&post_type=article&ignore_sticky_posts=1&order_by=relevance

Any way to fix this issue? THX

• This topic was modified 1 year, 11 months ago by evalast.

Hi, i tried both the following shortcode codes to output the form in a custom page in my admin area which worked fine – but it does not save the tickes after submitting the form. The page reloads, the POST submit shows the values in the network tab but no ticket saved in the tickes overview. Any idea how to make this work? thx

	echo '<br>Echo tiketform shortcode: '.do_shortcode( '[kbs_submit form="2180"]' );
		
		
	echo kbs_submit_form_shortcode( 
		array ( 
		'form' => 2180,
		'before' => 'This ',
		'after' => '!' )
	);

• This topic was modified 1 year, 11 months ago by evalast.

Hi – today i tested the plugin and i like it. Great work. I noticed that it loads a huge file which slows down – fontawesome.js its around 660KB. I think there is no need to load the hole file for a few icons. Maybe something like this helps. https://stackoverflow.com/questions/52340070/how-to-reduce-the-size-of-fontawesome-5-3-1

or using the css version which is smaller and you can make even smaller with https://icomoon.io/

best

• This topic was modified 1 year, 11 months ago by evalast.
• This topic was modified 1 year, 11 months ago by evalast.

I tried to contact the support team for KB Support through Facebook messanger but received no response. This is the message: “I have tried several times using both the Chrome and Edge browser to submit a support ticket on your website. Every time I do, I get the error message: “Security failed”. How can I submit a support ticket for the extension bundle I just purchased?”

This is my original support question:

I am having a problem getting the Email Support extension for KB Support to work. These are the troubleshooting steps I have taken:

1. Ensured that the domain email I am using to receive ticket submissions is active and able to receive email
2. Tested the connection to the mailbox using your feature on the email piping/server configuration page and it is active
3. Gone through your documentation several times to look for errors in my setup
4. Chatted with my host’s support team (BlueHost) to determine if the IMAP extension for PHP was installed and enabled. Their response was that it appeared so.
5. Looked in the web mailbox for the email address on the server to see if any message was sitting there.

The only issue I can find is that BlueHost isrunning PHP version 7.4 instead of the 7.2 version you have tested to, but I believe I can downgrade the version through cpanel, if that proves to be the deciding issue.

How do I assign a page or link to the knowledge base for people to read?

Hello,
I need to create a form with mandatory attached image.
But if I add an image it won’t let me send the ticket form.
Thanks.

Hi,
if i check the privacy option, i can’t send a new ticket, because the checkbox is missing in the form.
Terms&Conditions is functional as espected.

Second question, is there an DSGVO complient Captcha possible.
Google is evil ??

THX

Hello. How can we stop a WP user opening tickets please?

I have some users/customers spamming me with many multiple tickets…

thanks

Hi,
Interested in discussing the enterprise package ahead of buying it for our use case. I have submitted two support tickets and have not seen any responses.

Like the title says, I have set up a page with the [kbs_articles] shortcode, and I have three articles showing on the page, however when I click on them, they lead to a 404 page. This plugin is doing everything I need besides this.

Hello,

buy typing in the ticketnumber in the backend with or without leading # is not working like in the documentation.

Kind regards
Alex

Hello, the ticket system works great for guests.

1. Can you remove the requried on email field so that you don’t have to enter an email?

2. Is there a possibility that you can only access the link with a CODE, because otherwise the link is accessible to everyone if you know it.

Otherwise great plugin. Thanks for this!

Hello, is it possible to delete the customers all at once instead of once. Because currently only works manually in Panel and that is time-consuming for 300 customers

• This topic was modified 2 years, 4 months ago by minati88.

Hello, I would like to encrypt the message (textarea) for the tickets using OpenPGP form encryption.

This is a Plugin
OpenPGP Plugin

<?php do_action('wp_head', 'openpgp_cryptbutton_header'); ?>

<button type="button" id="cryptbutton" class="cryptbutton " style="" data-pubkey-uri="https://domain/pgp.txt" data-textarea-id="">encrypt voucher</button>

But that doesn’t seem to work entirely.

It seems to work with other forms such as contact form or checkout fields.
Of course, since you are the programmer of the plugin, I hope for a solution

• This topic was modified 2 years, 5 months ago by minati88.

Hello,

According to your doc: https://kb-support.com/articles/searching-for-tickets-by-id-or-number/

We want to search for a ticket by ID, but its not delivering any tickets after searching.

Is there any open problem? We can exclude and problem with another plugin – tested on clean install.

Plugin Version 1.5.5