ViciDial/ViciDialSVN
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix for input variable filtering in api.php

Browse Source 
git-svn-id: svn://192.168.202.10@3726 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2023-05-19 11:32:24 +00:00
parent 8d95fed3c0
commit 4b7387fa00
1 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
agc_2-X/trunk/www/agc/api.php
+5 -4
View File
@@ -109,10 +109,11 @@
# 220220-0847 - Added allow_web_debug system setting # 220220-0847 - Added allow_web_debug system setting
# 230412-0945 - Added send_notification function # 230412-0945 - Added send_notification function
# 230413-1957 - Fix for send_notification user group permissions # 230413-1957 - Fix for send_notification user group permissions
# 230519-0731 - Fix for input variable filtering
# #
$version = '2.14-74'; $version = '2.14-75';
$build = '230413-1957'; $build = '230519-0731';
$php_script = 'api.php'; $php_script = 'api.php';
$startMS = microtime(); $startMS = microtime();
@@ -352,7 +353,7 @@ if ($non_latin < 1)
{ {
$user=preg_replace("/[^-_0-9a-zA-Z]/","",$user); $user=preg_replace("/[^-_0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^-\.\+\/\=_0-9a-zA-Z]/","",$pass); $pass=preg_replace("/[^-\.\+\/\=_0-9a-zA-Z]/","",$pass);
$agent_user=preg_replace("/[^0-9a-zA-Z]/","",$agent_user); $agent_user=preg_replace("/[^-_0-9a-zA-Z]/","",$agent_user);
$function = preg_replace("/[^-\_0-9a-zA-Z]/","",$function); $function = preg_replace("/[^-\_0-9a-zA-Z]/","",$function);
$value = preg_replace("/[^-\|\_0-9a-zA-Z]/","",$value); $value = preg_replace("/[^-\|\_0-9a-zA-Z]/","",$value);
$focus = preg_replace("/[^-\_0-9a-zA-Z]/","",$focus); $focus = preg_replace("/[^-\_0-9a-zA-Z]/","",$focus);
@@ -445,7 +446,7 @@ else
{ {
$user=preg_replace("/[^-_0-9\p{L}]/u","",$user); $user=preg_replace("/[^-_0-9\p{L}]/u","",$user);
$pass = preg_replace('/[^-\.\+\/\=_0-9\p{L}]/u','',$pass); $pass = preg_replace('/[^-\.\+\/\=_0-9\p{L}]/u','',$pass);
$agent_user=preg_replace("/[^0-9\p{L}]/u","",$agent_user); $agent_user=preg_replace("/[^-_0-9\p{L}]/u","",$agent_user);
$function = preg_replace("/[^-\_0-9\p{L}]/u","",$function); $function = preg_replace("/[^-\_0-9\p{L}]/u","",$function);
$value = preg_replace("/[^-\|\_0-9\p{L}]/u","",$value); $value = preg_replace("/[^-\|\_0-9\p{L}]/u","",$value);
$focus = preg_replace("/[^-\_0-9\p{L}]/u","",$focus); $focus = preg_replace("/[^-\_0-9\p{L}]/u","",$focus);