osTicket v1.10 (stable) and Maintenance Release v1.9.15 are now available! Go get it now
Ticket status authentication
Here's a small suggestion. When users try to authenticate to view their tickets, i suggest to trim the email address and ticket# text boxes when submitted.
I notices that if i entered an extra space at the end of the email/ticket#, it's considered invalid. Since it's not a password, i believe trimming it is fine.