FreeScout Helpdesk Files

This release secures FreeScout attachments (#308). After installing this update make sure that /storage/app/public/attachment folder has been moved to /storage/app/attachment and if not - move it manually.

If you are using Nginx make sure to replace

    location ~* \.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|ogg|ogv|webm|htc|svg|woff|woff2|ttf)$ {
        expires 1M;
    access_log off;
    add_header Cache-Control "public";
    }
    location ~* \.(?:css|js)$ {
    expires 2d;
    access_log off;
    add_header Cache-Control "public, must-revalidate";
    }

with

    location ~* ^/storage/attachment/ {
        expires 1M;
        access_log off;
        try_files $uri $uri/ /index.php?$query_string;
    }
    location ~* ^/(?:css|js)/.*\.(?:css|js)$ {
        expires 2d;
        access_log off;
        add_header Cache-Control "public, must-revalidate";
    }
    location ~* ^/(?:css|fonts|img|installer|js|modules|[^\\\]+\..*)$ {
        expires 1M;
        access_log off;
        add_header Cache-Control "public";
    }

Now by default attachments are downloaded via PHP. If you still have any problems, please write here: https://github.com/freescout-helpdesk/freescout/issues/522

Next steps are not required, you can implement them only if you want to improve performance.

To enable downloading attachments via Apache's mod_xsendfile, enable it in the Apache and set APP_DOWNLOAD_ATTACHMENTS_VIA=apache in the .env file.

To enable downloading attachments via Nginx, set APP_DOWNLOAD_ATTACHMENTS_VIA=nginx in the .env file and add the following to the .conf file after location ~ \.php$ location:

location ^~ /storage/app/attachment/ {
    internal;
    alias /var/www/html/storage/app/attachment/;
}

Added * Secure attachments (#308) * Check max PHP version in the installer.

Fixed * Fixed relative date for Dutch translation.