fix: validate priority against allowed enum values in ticket creation

Author: mpge

includes/Services/TicketService.php

@@ -21,14 +21,15 @@ public function create( int $requester_id, array $data ): object {
         $reference = Ticket::generate_reference();
         $now = current_time( 'mysql' );
         $priority = $data['priority'] ?? \Escalated\Models\Setting::get( 'default_priority', 'medium' );
+        $valid_priorities = array_keys( \Escalated\Helpers\Enums::ticket_priorities() );
 
         $ticket_data = [
             'reference'    => $reference,
             'requester_id' => $requester_id,
             'subject'      => sanitize_text_field( $data['subject'] ),
             'description'  => wp_kses_post( $data['description'] ),
             'status'       => 'open',
-            'priority'     => sanitize_text_field( $priority ),
+            'priority'     => in_array( $priority, $valid_priorities, true ) ? $priority : 'medium',
             'ticket_type'  => in_array( $data['ticket_type'] ?? '', ['question', 'problem', 'incident', 'task'], true ) ? $data['ticket_type'] : 'question',
             'channel'      => sanitize_text_field( $data['channel'] ?? 'web' ),
             'department_id'=> ! empty( $data['department_id'] ) ? absint( $data['department_id'] ) : null,
@@ -65,14 +66,15 @@ public function create_guest( array $data ): object {
         $reference = Ticket::generate_reference();
         $now = current_time( 'mysql' );
         $priority = $data['priority'] ?? \Escalated\Models\Setting::get( 'default_priority', 'medium' );
+        $valid_priorities = array_keys( \Escalated\Helpers\Enums::ticket_priorities() );
 
         $ticket_data = [
             'reference'    => $reference,
             'requester_id' => null,
             'subject'      => sanitize_text_field( $data['subject'] ),
             'description'  => wp_kses_post( $data['description'] ),
             'status'       => 'open',
-            'priority'     => sanitize_text_field( $priority ),
+            'priority'     => in_array( $priority, $valid_priorities, true ) ? $priority : 'medium',
             'ticket_type'  => in_array( $data['ticket_type'] ?? '', ['question', 'problem', 'incident', 'task'], true ) ? $data['ticket_type'] : 'question',
             'channel'      => sanitize_text_field( $data['channel'] ?? 'web' ),
             'department_id'=> ! empty( $data['department_id'] ) ? absint( $data['department_id'] ) : null,