Client Tickets Require Login Bug

[cyben76]

Hi,

I have the option "Client Tickets Require Login" enabled in General Settings, but today i was going thru my Google Analytics and under Pages Report I saw a URL htps://myWHMCSdomain.com/viewticket.php?tid=XXX258&c=fefXQXXX.

I decided to click on it and it opened up a ticket that was submitted by a client, with all the replies displayed. I thought i was logged in on the same browser, so I decided to copy the link and opened it up using the browser's Incognito Mode. Same thing could see the full ticket without logging in.

Is this normal?
 

[WHMCS Alex]

Hello @cyben76,

I would only expect the ticket to visible by visiting the unique ticket number/URL only, where the ticket was submitted by an unregistered user. 
You can easily check if that was the case by reviewing whether the ticket was automatically linked to a client account. What can happen is registered users open a ticket via the contact form, or via email (where it’s then piped in) but using a different email address to that which is registered on the account, meaning that whilst you recognise them as being an existing client, WHMCS has not linked the ticket to said clients account, making the ticket accessible as if it were an unregistered user.

If you are finding tickets correctly linked to clients accounts are visible without logging in, I’d suggest submitting a ticket to us so we can investigate further.