diff --git a/agc_2-X/trunk/www/vicidial/AST_agent_time_sheet.php b/agc_2-X/trunk/www/vicidial/AST_agent_time_sheet.php index d263c406..109a32a0 100644 --- a/agc_2-X/trunk/www/vicidial/AST_agent_time_sheet.php +++ b/agc_2-X/trunk/www/vicidial/AST_agent_time_sheet.php @@ -1,7 +1,7 @@ LICENSE: AGPLv2 +# Copyright (C) 2022 Matt Florell LICENSE: AGPLv2 # # CHANGES # @@ -27,6 +27,7 @@ # 160325-1428 - Changes for sidebar update # 170409-1539 - Added IP List validation code # 170711-1102 - Added screen colors and fixed default date variable +# 220122-1700 - Added more variable filtering # $startMS = microtime(); @@ -100,19 +101,21 @@ else } ############# -$user=$agent; - if ($non_latin < 1) { $PHP_AUTH_USER = preg_replace('/[^-_0-9a-zA-Z]/', '', $PHP_AUTH_USER); $PHP_AUTH_PW = preg_replace('/[^-_0-9a-zA-Z]/', '', $PHP_AUTH_PW); + $agent = preg_replace('/[^-_0-9a-zA-Z]/','',$agent); } else { $PHP_AUTH_PW = preg_replace("/'|\"|\\\\|;/","",$PHP_AUTH_PW); $PHP_AUTH_USER = preg_replace("/'|\"|\\\\|;/","",$PHP_AUTH_USER); + $agent = preg_replace('/[^-_0-9\p{L}]/u','',$agent); } +$user=$agent; + $stmt="SELECT selected_language from vicidial_users where user='$PHP_AUTH_USER';"; if ($DB) {echo "|$stmt|\n";} $rslt=mysql_to_mysqli($stmt, $link); @@ -180,10 +183,10 @@ else exit; } -$agent = preg_replace('/[^-_0-9a-zA-Z]/', '', $agent); $query_date = preg_replace('/[^-_0-9a-zA-Z]/', '', $query_date); $calls_summary = preg_replace('/[^-_0-9a-zA-Z]/', '', $calls_summary); $file_download = preg_replace('/[^-_0-9a-zA-Z]/', '', $file_download); +$search_archived_data = preg_replace('/[^-_0-9a-zA-Z]/', '', $search_archived_data); $NOW_DATE = date("Y-m-d"); $NOW_TIME = date("Y-m-d H:i:s"); $STARTtime = date("U"); diff --git a/agc_2-X/trunk/www/vicidial/admin.php b/agc_2-X/trunk/www/vicidial/admin.php index e18b0a32..23367a16 100644 --- a/agc_2-X/trunk/www/vicidial/admin.php +++ b/agc_2-X/trunk/www/vicidial/admin.php @@ -1,7 +1,7 @@ LICENSE: AGPLv2 +# Copyright (C) 2022 Matt Florell LICENSE: AGPLv2 # $startMS = microtime(); @@ -3186,6 +3186,9 @@ $agent_hidden_sound_seconds = preg_replace('/[^0-9]/','',$agent_hidden_sound_sec $in_man_dial_next_ready_seconds = preg_replace('/[^0-9]/','',$in_man_dial_next_ready_seconds); $call_limit_24hour = preg_replace('/[^0-9]/','',$call_limit_24hour); $download_invalid_files = preg_replace('/[^0-9]/','',$download_invalid_files); +$modify_email_accounts = preg_replace('/[^0-9]/','',$modify_email_accounts); +$access_recordings = preg_replace('/[^0-9]/','',$access_recordings); +$agentcall_email = preg_replace('/[^0-9]/','',$agentcall_email); $user_new_lead_limit = preg_replace('/[^-0-9]/','',$user_new_lead_limit); $drop_call_seconds = preg_replace('/[^-0-9]/','',$drop_call_seconds); @@ -5765,12 +5768,13 @@ if ($SSscript_remove_js > 0) # 211217-0732 - Fixes for PHP8, issue #1341 # 220118-1944 - Added auto_alt_threshold option for campaigns and override option for lists # 220120-0902 - Added download_invalid_files user option +# 220122-1659 - Added more variable filtering, updated copyright year to 2022 # # make sure you have added a user to the vicidial_users MySQL table with at least user_level 9 to access this page the first time -$admin_version = '2.14-840a'; -$build = '220120-0902'; +$admin_version = '2.14-841a'; +$build = '220122-1659'; $STARTtime = date("U"); $SQLdate = date("Y-m-d H:i:s"); @@ -5841,7 +5845,7 @@ if ($force_logout) echo "\n"; echo "\n"; echo "\n"; - echo "\n"; + echo "\n"; echo "\n"; ?> \n"; echo "\n"; @@ -48289,7 +48293,7 @@ if ($ADD==999995) echo "
"._QXZ("Welcome to ViciDial: copyright, trademark and license page")."

\n"; echo "
\n"; - echo "\n"; + echo "\n"; echo "\n"; @@ -48309,7 +48313,7 @@ if ($ADD==999995) echo "
"._QXZ("Copyright").":   "._QXZ("The ViciDial Contact Center Suite is maintained by the")." ViciDial Group, © 2021
"._QXZ("Copyright").":   "._QXZ("The ViciDial Contact Center Suite is maintained by the")." ViciDial Group, © 2022
"._QXZ("Trademark").":   \"VICIDIAL\" "._QXZ("is a registered trademark of the")." ViciDial Group. Here is our "._QXZ("trademark use policy")."
\n"; echo ""; - echo "\n"; + echo "\n"; echo "\n"; echo "\n"; @@ -49473,7 +49477,7 @@ echo "

"; echo _QXZ("BUILD").": $build\n"; if (!preg_match("/_BUILD_/",$SShosted_settings)) - {echo "
© 2021 ViciDial Group
";} + {echo "
© 2022 ViciDial Group
";} echo "\n"; ?> diff --git a/agc_2-X/trunk/www/vicidial/user_stats.php b/agc_2-X/trunk/www/vicidial/user_stats.php index 465643f2..ede89836 100644 --- a/agc_2-X/trunk/www/vicidial/user_stats.php +++ b/agc_2-X/trunk/www/vicidial/user_stats.php @@ -1,7 +1,7 @@ LICENSE: AGPLv2 +# Copyright (C) 2022 Matt Florell LICENSE: AGPLv2 # # CHANGES # @@ -64,6 +64,7 @@ # 200702-1710 - Added ANI to INBOUND/CLOSER records for NVAuser, added secondary check to find lead ID for DIDs # 210317-0058 - Changed lead-modify page links to javascript because of Chrome # 210319-1338 - Added HELP pop-ups for each section, added agent browser visibility log stats to agent activity section, reformatted most sections +# 220122-1701 - Added more variable filtering # $startMS = microtime(); @@ -197,11 +198,13 @@ if ($non_latin < 1) { $PHP_AUTH_USER = preg_replace('/[^-_0-9a-zA-Z]/', '', $PHP_AUTH_USER); $PHP_AUTH_PW = preg_replace('/[^-_0-9a-zA-Z]/', '', $PHP_AUTH_PW); + $NVAuser = preg_replace('/[^-_0-9a-zA-Z]/','',$NVAuser); } else { $PHP_AUTH_PW = preg_replace("/'|\"|\\\\|;/","",$PHP_AUTH_PW); $PHP_AUTH_USER = preg_replace("/'|\"|\\\\|;/","",$PHP_AUTH_USER); + $NVAuser = preg_replace('/[^-_0-9\p{L}]/u','',$NVAuser); } $did_id = preg_replace("/'|\"|\\\\|;/","",$did_id); $did = preg_replace("/'|\"|\\\\|;/","",$did); @@ -209,7 +212,10 @@ $begin_date = preg_replace("/'|\"|\\\\|;/","",$begin_date); $end_date = preg_replace("/'|\"|\\\\|;/","",$end_date); $user = preg_replace("/'|\"|\\\\|;/","",$user); $call_status = preg_replace("/'|\"|\\\\|;/","",$call_status); -$NVAuser = preg_replace("/'|\"|\\\\|;/","",$NVAuser); +$file_download = preg_replace('/[^-_0-9a-zA-Z]/', '', $file_download); +$pause_code_rpt = preg_replace('/[^-_0-9a-zA-Z]/', '', $pause_code_rpt); +$park_rpt = preg_replace('/[^-_0-9a-zA-Z]/', '', $park_rpt); +$search_archived_data = preg_replace('/[^-_0-9a-zA-Z]/', '', $search_archived_data); if ($call_status != "") {
"._QXZ("Matex").": "._QXZ("Copyright").":   "._QXZ("Matex PHP Mathematical expression parser and evaluator library was written by Dorin Marcoci").", © 2021
"._QXZ("Copyright").":   "._QXZ("Matex PHP Mathematical expression parser and evaluator library was written by Dorin Marcoci").", © 2022
"._QXZ("License").":   "._QXZ("Matex is licensed under the")." MIT "._QXZ("open source license")."
"._QXZ("Source Code").":   "._QXZ("Matex original source code is available at")." "._QXZ("this link").".