Invalid login/Security Violation issue with ticket

[mambobrown]

I had a user who I created a ticket for from an email. I copied the email address but accidentially included a space after the address. When the user received the automated email and tried to access the ticket it gave them an invalid login error message. Fortunately, they also had other tickets (which allowed us to see the new and old tickets) but when you clicked on the new ticket they got an error message "Security Violation. Repeated violations will result in your account being locked". I was able to figure out in about 30 minutes that a space (at the end of the email address) was the culprit.

If possible, in the next version of OSTICKET please truncate spaces before and after the email address before it is stored in the database (and before an email is sent out).

[ntozier]

Moving this suggestion to the "Suggestions and Feedback" area.

Thanks for the feedback!

[cpham55]

How to fix this issue?
Thank you

[ntozier]

He said the problem was "I was able to figure out in about 30 minutes that a space (at the end of the email address) was the culprit. "

You could run a query against the database to remove blank spaces at the end of email addresses. You could also modify the code to trim whitespace from the field before it is inserted.