Fix XSS Vulnerability In "tpl.inc.php"

Another area was also outputting the unsanitized value.
forms: Add free text field

This is similar to the section break but doesn't have the <hr> element
before it and allows for HTML input (including images)
Add concept of client-only form fields
i18n: Fix crash building language packs
oops: Fixup placement of sequence create task
orm: Fix MySQL occasional "Commands OOS" error

Under certain intermittent circumstances (usually a significant number of
ORM queries), the ORM will trigger a MySQL error:

Commands out of sync; you can't run this command now

Usually this MySQL error is related to buffered versus unbuffered queries.
However, the ORM already uses buffered queries (MySQL calls it
"store_result"). In this case, it appears there is some sort of race between
fetching the result metadata before configuring the statement for buffering.
(By "race" I mean that the error is not reliably triggered).

This patch seems to fix the issue by configuring buffering before fetching
result metadata — necessary to configure the fetching (output) phase of the
statement.
oops: Fix hardcoded table prefix
Merge pull request #1334 from greezybacon/issue/orm-mysqli-commands-oos

orm: Fix MySQL occasional "Commands OOS" error

Reviewed-By: Peter Rotich <peter@osticket.com>
Merge pull request #1335 from protich/issue/1333

oops: Fix hardcoded table prefix

Reviewed-By: Jared Hancock <jared@osticket.com>
forms: Revisit several small issues for "info" field

  * Use the title of "Information" with internal tag of "info"
  * Add "Visibility" column to UI and retire "Required" and "Internal"
    columns
  * Add visibility selection to new fields and show visibility to the user
    information fields when displayed on the ticket details form
  * Make the visibility settings translatable
  * Use constants internally for visibility configuration detection
  * Use a larger input when managing the information HTML content
  * Fix validation errors for new fields
    * Enforce new field name uniqueness
    * Enforce new field name character validation
bug: Decode mailbox when parsing an email address

This addresses cases where incoming emails doesn't include charset and
mailbox may include non-ascii characters.
Merge pull request #1332 from protich/issue/mailbox-decode

bug: Decode mailbox when parsing an email address

Reviewed-By: Jared Hancock <jared@osticket.com>
forms: Add help tip for new Visibility column
Merge pull request #1329 from greezybacon/feature/field-free-text

forms: Add free text field

Reviewed-By: Peter Rotich <peter@osticket.com>
forms: Add default selection to SelectionField

This allows administrators to select a default value for selection fields
deriving from Custom Lists. This has been implemented on the ChoiceField,
but was forgotten on the SelectionField
Merge pull request #1343 from greezybacon/feature/selection-default

forms: Add default selection to SelectionField

Reviewed-By: Peter Rotich <peter@osticket.com>
Merge remote branch 'upstream/develop' into develop-next
Dashboard statistics should use 'period' as the date limiter

The statistics module on the dashboard was using the incorrect query parameter
'stop'. This meant that the module was loading all tickets from the report start
date to the present day. This commit fixes this by using the 'period' parameter
instead.
oops: Allow multiple new fields with no `name`
mpdf: Upgrade to 5.7.3