diff --git a/app/Http/Controllers/Agent/helpdesk/TicketController.php b/app/Http/Controllers/Agent/helpdesk/TicketController.php
index 8af7ac2f9..18ec953b1 100644
--- a/app/Http/Controllers/Agent/helpdesk/TicketController.php
+++ b/app/Http/Controllers/Agent/helpdesk/TicketController.php
@@ -1802,6 +1802,13 @@ class TicketController extends Controller
     {
         $name = Input::get('name');
         $email = Input::get('email');
+        $validator = \Validator::make(
+            ['email' => $email,'name' => $name, ],
+            ['email' => 'required|email',]
+        );
+        if ($validator->fails()) {
+            return "Invalid email address.";
+        }
         $ticket_id = Input::get('ticket_id');
         $user_search = User::where('email', '=', $email)->first();
         if (isset($user_serach)) {
diff --git a/resources/views/themes/default1/agent/helpdesk/ticket/timeline.blade.php b/resources/views/themes/default1/agent/helpdesk/ticket/timeline.blade.php
index a3508c1ca..74de111e7 100644
--- a/resources/views/themes/default1/agent/helpdesk/ticket/timeline.blade.php
+++ b/resources/views/themes/default1/agent/helpdesk/ticket/timeline.blade.php
@@ -1155,7 +1155,7 @@ alert(h+20);
                                 </div>
                                 <div id="hide12345">
                                     <input type="text" name="name" class="form-control" placeholder="{!! Lang::get('lang.name') !!}" required>
-                                    <input type="text" name="email" class="form-control" placeholder="{!! Lang::get('lang.e-mail') !!}" required> 
+                                    <input type="email" name="email" class="form-control" placeholder="{!! Lang::get('lang.e-mail') !!}" required> 
                                     <input type="hidden" name="ticket_id" value="{!! $tickets->id !!}">
                                     <input type="submit" class="btn" value="{!! Lang::get('lang.submit') !!}">
                                 </div>
diff --git a/resources/views/themes/default1/agent/helpdesk/user/show.blade.php b/resources/views/themes/default1/agent/helpdesk/user/show.blade.php
index 7b2dd16e5..f4e7a087b 100644
--- a/resources/views/themes/default1/agent/helpdesk/user/show.blade.php
+++ b/resources/views/themes/default1/agent/helpdesk/user/show.blade.php
@@ -230,6 +230,7 @@ class="active"
 
         <!-- Delete -->
         <form action="{!!URL::route('user.post.delete', $users->id)!!}" method="post" role="form">
+        {{ csrf_field() }}
             <div class="modal fade" id="addNewCategoryModal3" tabindex="-1" role="dialog">
                 <div class="modal-dialog" role="document">
                     <div class="modal-content">
@@ -254,6 +255,8 @@ class="active"
                             <option value="ban_delete">Ban and delete </option>
                             <option value="delete">Delete</option>
                             </select>
+        }
+        }
  -->
 
 
@@ -331,6 +334,7 @@ class="active"
     <!-- Role -->
     <!-- Admin -->
     <form action="{!!URL::route('user.post.rolechangeadmin', $users->id)!!}" method="post" role="form">
+    {{ csrf_field() }}
         <div class="modal fade" id="addNewCategoryModal4" tabindex="-1" role="dialog">
             <div class="modal-dialog" role="document">
                 <div class="modal-content">
@@ -370,6 +374,7 @@ class="active"
     </form>
     <!-- user -->
     <form action="{!!URL::route('user.post.rolechangeuser', $users->id)!!}" method="post" role="form">
+    {{ csrf_field() }}
         <div class="modal fade" id="addNewCategoryModal2" tabindex="-1" role="dialog">
             <div class="modal-dialog" role="document">
                 <div class="modal-content">
@@ -398,6 +403,7 @@ class="active"
     </form>
     <!-- agent -->
     <form action="{!!URL::route('user.post.rolechangeagent', $users->id)!!}" method="post" role="form">
+    {{ csrf_field() }}
         <div class="modal fade" id="addNewCategoryModal1" tabindex="-1" role="dialog">
             <div class="modal-dialog" role="document">
                 <div class="modal-content">
@@ -453,6 +459,7 @@ class="active"
 
                     <br/>
                     <form name="myForm" action="{!!URL::route('user.post.changepassword', $users->id)!!}" method="post" role="form" onsubmit="return validateForm()">
+                    {{ csrf_field() }}
                         <div class="form-group">
 
                             <!-- <div class="form-group {{ $errors->has('change_password') ? 'has-error' : '' }}"> -->
@@ -478,6 +485,7 @@ class="active"
     <!-- Restore -->
       <!-- Admin -->
     <form action="{!!URL::route('user.restore', $users->id)!!}" method="post" role="form">
+    {{ csrf_field() }}
         <div class="modal modal-fade" id="addNewCategoryModal8" tabindex="-1" role="dialog">
             <div class="modal-dialog" role="document">
                 <div class="modal-content">
@@ -727,6 +735,7 @@ $(document).ready(function(){
                     </div>
                     <div class="box-body">
                         <form id="foo">
+                        {{ csrf_field() }}
                             <div  class="form-group">
                                 <div class="row">
                                     <div class='col-sm-3'>