Added PHP input form variable filters

git-svn-id: svn://192.168.202.10@3566 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2022-02-18 06:09:51 +00:00
parent 9eafb50667
commit 3527a06150
158 changed files with 297 additions and 14 deletions
+12 -3
View File
@@ -1,7 +1,7 @@
<?php
# realtime_report.php
#
# Copyright (C) 2021 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2022 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# live real-time stats for the VICIDIAL Auto-Dialer all servers
#
@@ -54,12 +54,13 @@
# 201107-2254 - Added optional display of parked calls stats, inbound SLA and LIMITED report type
# 210314-2039 - Added DID Description for inbound calls
# 211216-0846 - Added new User Group options
# 220217-2046 - Added input variable filters
#
$startMS = microtime();
$version = '2.14-41';
$build = '211216-0846';
$version = '2.14-42';
$build = '220217-2046';
header ("Content-type: text/html; charset=utf-8");
@@ -143,6 +144,7 @@ if (isset($_GET["parkSTATS"])) {$parkSTATS=$_GET["parkSTATS"];}
if (isset($_GET["SLAinSTATS"])) {$SLAinSTATS=$_GET["SLAinSTATS"];}
elseif (isset($_POST["SLAinSTATS"])) {$SLAinSTATS=$_POST["SLAinSTATS"];}
$DB=preg_replace("/[^0-9a-zA-Z]/","",$DB);
$report_name = 'Real-Time Main Report';
$db_source = 'M';
@@ -373,6 +375,13 @@ $SLAinSTATS = preg_replace('/[^-_0-9a-zA-Z]/', '', $SLAinSTATS);
$INGROUPcolorOVERRIDE = preg_replace('/[^-_0-9a-zA-Z]/', '', $INGROUPcolorOVERRIDE);
$droppedOFtotal = preg_replace('/[^-_0-9a-zA-Z]/', '', $droppedOFtotal);
$report_display_type = preg_replace('/[^-_0-9a-zA-Z]/', '', $report_display_type);
$mobile_device = preg_replace('/[^-_0-9a-zA-Z]/', '', $mobile_device);
$RTajax = preg_replace('/[^-_0-9a-zA-Z]/', '', $RTajax);
$RTpass = preg_replace('/[^-_0-9a-zA-Z]/', '', $RTpass);
$RTuser = preg_replace('/[^-_0-9a-zA-Z]/', '', $RTuser);
$server_ip = preg_replace('/[^-\._0-9a-zA-Z]/', '', $server_ip);
$SUBMIT = preg_replace('/[^-_0-9a-zA-Z]/', '', $SUBMIT);
$submit = preg_replace('/[^-_0-9a-zA-Z]/', '', $submit);
$stmt="SELECT selected_language from vicidial_users where user='$PHP_AUTH_USER';";
if ($DB) {echo "|$stmt|\n";}