ViciDial/ViciDialSVN
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

minor security fixes from issue #545

Browse Source 
git-svn-id: svn://192.168.202.10@1799 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2012-03-27 20:58:16 +00:00
parent c075b93037
commit 5a541b0ecd
3 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
agc_2-X/trunk/www/agc/api.php
+2
View File
@@ -263,6 +263,8 @@ if ($non_latin < 1)
$callback_comments = ereg_replace("\+"," ",$callback_comments);
$callback_comments = ereg_replace("[^- \.\_0-9a-zA-Z]","",$callback_comments);
$qm_dispo_code = ereg_replace("[^-\.\_0-9a-zA-Z]","",$qm_dispo_code);
$alt_user = ereg_replace("[^0-9a-zA-Z]","",$alt_user);
$postal_code = ereg_replace("[^- \.\_0-9a-zA-Z]","",$postal_code);
}
else
{
agc_2-X/trunk/www/vicidial/callcard_admin.php
+1 -1
View File
@@ -112,7 +112,7 @@ if ($non_latin < 1)
$batch = ereg_replace("[^0-9]","",$batch);
$pack = ereg_replace("[^0-9]","",$pack);
$sequence = ereg_replace("[^0-9]","",$sequence);
$territory_description = ereg_replace("[^ -\_\.\,0-9a-zA-Z]","",$territory_description);
$territory_description = ereg_replace("[^- \_\.\,0-9a-zA-Z]","",$territory_description);
$user = ereg_replace("[^-\_0-9a-zA-Z]","",$user);
$old_territory = ereg_replace("[^-\_0-9a-zA-Z]","",$old_territory);
$old_user = ereg_replace("[^-\_0-9a-zA-Z]","",$old_user);
agc_2-X/trunk/www/vicidial/user_territories.php
+1 -1
View File
@@ -84,7 +84,7 @@ if ($non_latin < 1)
$DB = ereg_replace("[^0-9]","",$DB);
$action = ereg_replace("[^\_0-9a-zA-Z]","",$action);
$territory = ereg_replace("[^-\_0-9a-zA-Z]","",$territory);
$territory_description = ereg_replace("[^ -\_\.\,0-9a-zA-Z]","",$territory_description);
$territory_description = ereg_replace("[^- \_\.\,0-9a-zA-Z]","",$territory_description);
$user = ereg_replace("[^-\_0-9a-zA-Z]","",$user);
$level = ereg_replace("[^\_A-Z]","",$level);
$old_territory = ereg_replace("[^-\_0-9a-zA-Z]","",$old_territory);