[ Th3_Err0r Bypassed ]

Changes in 3.7.10 - 26th May 2026
- fix: SQL error when updating from 3.7.8 to 3.7.9 using the full update file rather than the patch
- fix: POP3 fetching stopped working properly in 3.7.9 due to r/rb mode mismatch
- fix: database result checked against the wrong variable when re-sending reply notifications

Changes in 3.7.9 - 23rd May 2026
- security: various fixes and improvements
- changed URL generator to only auto-link safe schemes (http, https, mailto)
- improved security and reliability of email-to-ticket attachment processing
- fix: email link scanners (common in enterprise use) invalidate password reset links
- fix: fixed validation of custom ticket priority values in new ticket creation
- fix: show the backup code form again when a wrong MFA backup code is entered
- fix: duplicate tickets appearing in exports when duplicate collaborator records existed
- fix: ticket exports showing the current time as "First reply at" for tickets with no first reply
- fix: report warnings when time tracking was disabled
- fix: custom priorities are not properly used in some cases
- fix: "this week" and "last week" date range issue on Mondays
- fix: edge case ticket display issue not printing table head

Changes in 3.7.8 - 4th May 2026
- security: various fixes and improvements
- fix: missing users in bulk assign list with permission granted by group
- fix: display deactivated users' names in the ticket list
- fix: clicking help icon should not initiate the action
- fix: wrong database function call when clearing temporary attachments
- fix: missing include when bulk resolving tickets with collaborators and customer notifications are off
- fix: HTML code in aria-label must be encoded
- fix: wrong aria-label variable in admin_ticket.php
- fix: column email in where clause is ambiguous when searching for tickets
- fix: deleting custom status wipes out ticket custom field

Changes in 3.7.7 - 16th April 2026
- fix: a JS error in 3.7.6 breaks knowledgebase administration
- fix: wrong aria-label variable

Changes in 3.7.6 - 9th April 2026
- improved accessibility for admin and public pages (WCAG 2.1 AA compliance)
- you can now create customers when editing a ticket
- fix: customer-side ticket details cannot be expanded anymore on mobile
- fix: unassigned tickets not sending email notifications to users with team permissions
- fix: extending admin session interferes with MFA verification
- fix: prevent URL encoding of new tags in email templates
- fix: cannot select "Yes" multi-email option when setting up custom email fields
- fix: manual cache clearing not working as expected
- fix: call opcache_reset every time cache is cleared
- updated PHPMailer to 7.0.2

Changes in 3.7.5 - 13th February 2026
- fix: permission group categories were not considered when adding collaborators<br />
- fix: administrators should always be able to edit all permission groups<br />
- fix: saving a customized theme could inadvertently reset colors</p>

Changes in 3.7.4 - 8th February 2026
- fix: remove possible invalid theme $css_variable
- fix: preserve custom theme variables when not using patch files