ViciDial/ViciDialSVN
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix for input variable filtering in api.php

Browse Source 
git-svn-id: svn://192.168.202.10@3726 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2023-05-19 11:32:24 +00:00
parent 8d95fed3c0
commit 4b7387fa00
1 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
agc_2-X/trunk/www/agc/api.php
+5 -4
View File
@@ -109,10 +109,11 @@
# 220220-0847 - Added allow_web_debug system setting
# 230412-0945 - Added send_notification function
# 230413-1957 - Fix for send_notification user group permissions
# 230519-0731 - Fix for input variable filtering
#
$version = '2.14-74';
$build = '230413-1957';
$version = '2.14-75';
$build = '230519-0731';
$php_script = 'api.php';
$startMS = microtime();
@@ -352,7 +353,7 @@ if ($non_latin < 1)
{
$user=preg_replace("/[^-_0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^-\.\+\/\=_0-9a-zA-Z]/","",$pass);
$agent_user=preg_replace("/[^0-9a-zA-Z]/","",$agent_user);
$agent_user=preg_replace("/[^-_0-9a-zA-Z]/","",$agent_user);
$function = preg_replace("/[^-\_0-9a-zA-Z]/","",$function);
$value = preg_replace("/[^-\|\_0-9a-zA-Z]/","",$value);
$focus = preg_replace("/[^-\_0-9a-zA-Z]/","",$focus);
@@ -445,7 +446,7 @@ else
{
$user=preg_replace("/[^-_0-9\p{L}]/u","",$user);
$pass = preg_replace('/[^-\.\+\/\=_0-9\p{L}]/u','',$pass);
$agent_user=preg_replace("/[^0-9\p{L}]/u","",$agent_user);
$agent_user=preg_replace("/[^-_0-9\p{L}]/u","",$agent_user);
$function = preg_replace("/[^-\_0-9\p{L}]/u","",$function);
$value = preg_replace("/[^-\|\_0-9\p{L}]/u","",$value);
$focus = preg_replace("/[^-\_0-9\p{L}]/u","",$focus);