Add Equipment

[Chris Byrd]

Tried to add a piece of equipment.  When saving I got this error.

Also on Assignment & Location>Assigned Member it is still showing nulls

[Chris Byrd]

Also under ownership>Personal>Owner it shows the nulls.   If you select ownership>Organization it does not allow you to pick an organization.

[mike]

The recurring null values, broken organizational selections, and the invalid CSRF TOKEN error could all point to a single root cause: TicketsCAD v4 cannot properly read or maintain your user session variables. As per your newest post. 

Again this is just a general response as I don’t have an xampp install and if any one sees this can correct it.

Because the session is broken, the server rejects your equipment form submission as a security risk (CSRF failure), and it cannot pull dynamic records like Owners or Members, defaulting them to null.

Step 1: Fix the CSRF Token and Session Expiry

In XAMPP, this is usually caused by Apache lacking write permissions to the Windows temporary folder where PHP stores session files, or because the browser is rejecting session cookies due to an unconfigured domain.

1. Open your XAMPP Control Panel and click Config next to Apache, then open php.ini.
2. Press Ctrl + F and search for session.save_path.
3. Ensure it is uncommented (no ; at the front) and points to a valid, writeable XAMPP folder. Change it to look exactly like this:
   ini

   session.save_path = "C:/xampp/tmp"
   

   Use code with caution.
4. Search for session.cookie_secure in the same file. If it is set to On or 1, change it to Off or 0 (since you are running locally on http://localhost without an SSL certificate).
5. Save the file and Restart Apache.

Step 2: Clear Browser Storage

A corrupted session cookie from your previous 403 errors will cause persistent CSRF failures even after fixing the server config.

1. In your browser, press F12 to open Developer Tools.
2. Go to the Application or Storage tab.
3. Select Clear site data (or manually delete all Cookies and Local Storage for localhost).
4. Refresh the page and log back into TicketsCAD.

Step 3: Fix Database Null Values (Ownership & Assignment)

If the dropdowns still show null after fixing the session, TicketsCAD v4's database tables are missing their core setup data. You can fix this via phpMyAdmin:

1. Open http://localhost/phpmyadmin and select your TicketsCAD database.
2. Check the organizations and members tables. If they are empty, the dropdowns will break or show null.
3. If they are empty, click the Insert tab on the organizations table and add a dummy row (e.g., ID: 1, Name: Main Agency).
4. Do the same for the members table so the "Assigned Member" dropdown has a valid record to pull instead of a system null.

If you complete these steps and invalid CSRF TOKEN error disappears when you hit save, or if you are still seeing blank pop-ups when clicking the organization fields and you get no other responses I would open an issue on GitHub and Eric can get into it and provide a fix that f it’s ticketscad issue with an xampp install. 

Sent from my iPhone

--
You received this message because you are subscribed to the Google Groups "Open Source CAD" group.
To unsubscribe from this group and stop receiving emails from it, send an email to open-source-c...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/open-source-cad/c41a09e9-5b3a-4e8c-8c51-f33dfe55d16bn%40googlegroups.com.

[Eric Osterberg]

Okay, Chris,

Git Pull should have a patch shortly. GitHub has an outage right now, and that's causing some issues with the automated pipeline for delivering the patches... But any moment now.

You can monitor the GitHub failure at  githubstatus.com . We are dependent on the GitHub Actions functions to automatically build docker containers and run automated testing when updates are applied.

@Mike, some of the answers being generated here can create security vulnerabilities and potentially render a system in a state where a user would need to force their git pull because serious conflicts prevent automatic patch application. A few things like the video links are a bit off topic.

Eric Osterberg
Lead Maintainer, TicketsCAD - github.com/openises/TicketsCAD
Open-source dispatch software for volunteer fire, EMS, CERT & ARES/RACES teams

To view this discussion visit https://groups.google.com/d/msgid/open-source-cad/CADuRW1yjobtW8FxfpY21jBwDPuz2EktN72E6ibK6HBihAC4hqQ%40mail.gmail.com.

[mike]

Please delete any thing unrelated to the issue or any potential security issue  thanks. 

Sent from my iPhone

To view this discussion visit https://groups.google.com/d/msgid/open-source-cad/CAJLaYFX9JfxdmLFNwfbV0tf27Qu-GifyTyrf-KcMjA8kOHa6Ww%40mail.gmail.com.

[Chris Byrd]

Eric,  That fixed adding equipment   Should the ownership pull down , when selecting organization have another pull down to select the organization ?

Chris

[Eric Osterberg]

The entire concept of multiple organizations was bolted on afterwards as a feature request during the beta testing period. Implementing multiple organizations was clearly a bigger ask than anyone planned for.

The DB schema would need to be changed. There are likely more security implications. 

For the moment, I'd call this another feature request/expansion, rather than a bug. Originally, this was simply a way to track personal property in addition to organizational property. 

Let me ask: Do you also see a requirement for multiple organizations to share a CAD system while maintaining isolation for members, roles, training, assets, schedules, certifications, address books, permissions/privileges???

Or were you simply wondering?

Eric Osterberg
Lead Maintainer, TicketsCAD - github.com/openises/TicketsCAD
Open-source dispatch software for volunteer fire, EMS, CERT & ARES/RACES teams

To view this discussion visit https://groups.google.com/d/msgid/open-source-cad/2973244e-dd17-4865-93b3-d7308a68f6fbn%40googlegroups.com.

[Chris Byrd]

When we have a event, we have multiple agency's that we work with and use the ICS equipment requests to bring in resources.   We have to track where the equipment comes from so we can account for it on demob.   The separation of permissions and privileges may not be as needed but we do track personnel for multiple agencies.   Roles and some training do come into play but not as much on certifications and schedules.     Imagine an event that has a CCERT Team that does the cad, dispatch and event management,  ICS Command structure over all command, Highway Patrol, Local Law, DEA, Treasury and EMS.   We using traccar (which we will now use with ticketscad) to track the locations of the personnel.  We also track assets that have been imported for the event (ATV, Boats , Heli's and Cameras).     The command tent would have the dashboards on big screens and we have dispatchers in a mobile command center.

This event has around 125000 attendees.     

Chris