updated Spanish agc_es

git-svn-id: svn://192.168.202.10@210 3d104415-ff17-0410-8863-d5cf3c621b8a

agc_2-X/trunk/LANG_www/agc_es/active_list_refresh.php

@@ -37,6 +37,7 @@
 # 50610-1155 - Added NULL check on MySQL results to reduced errors
 # 50711-1209 - removed HTTP authentication in favor of user/pass vars
 # 60421-1155 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1118 - Added variable filters to close security holes for login form
 #
 
 require("dbconnect.php");
@@ -79,6 +80,24 @@ if (isset($_GET["textareawidth"]))			{$textareawidth=$_GET["textareawidth"];}
 if (isset($_GET["field_name"]))				{$field_name=$_GET["field_name"];}
 	elseif (isset($_POST["field_name"]))	{$field_name=$_POST["field_name"];}
 
+### security strip all non-alphanumeric characters out of the variables ###
+	$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+	$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+	$ADD=ereg_replace("[^0-9]","",$ADD);
+	$order=ereg_replace("[^0-9a-zA-Z]","",$order);
+	$format=ereg_replace("[^0-9a-zA-Z]","",$format);
+	$bgcolor=ereg_replace("[^\#0-9a-zA-Z]","",$bgcolor);
+	$txtcolor=ereg_replace("[^\#0-9a-zA-Z]","",$txtcolor);
+	$txtsize=ereg_replace("[^0-9a-zA-Z]","",$txtsize);
+	$selectsize=ereg_replace("[^0-9a-zA-Z]","",$selectsize);
+	$selectfontsize=ereg_replace("[^0-9a-zA-Z]","",$selectfontsize);
+	$selectedext=ereg_replace("[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]","",$selectedext);
+	$selectedtrunk=ereg_replace("[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]","",$selectedtrunk);
+	$selectedlocal=ereg_replace("[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]","",$selectedlocal);
+	$textareaheight=ereg_replace("[^0-9a-zA-Z]","",$textareaheight);
+	$textareawidth=ereg_replace("[^0-9a-zA-Z]","",$textareawidth);
+	$field_name=ereg_replace("[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]","",$field_name);
+
 # default optional vars if not set
 if (!isset($ADD))				{$ADD="1";}
 if (!isset($order))				{$order='desc';}
@@ -91,8 +110,8 @@ if (!isset($selectfontsize))	{$selectfontsize='10';}
 if (!isset($textareaheight))	{$textareaheight='10';}
 if (!isset($textareawidth))		{$textareawidth='20';}
 
-$version = '0.0.7';
+$version = '0.0.8';
-$build = '60421-1155';
+$build = '60619-1118';
 $StarTtime = date("U");
 $NOW_DATE = date("Y-m-d");
 $NOW_TIME = date("Y-m-d H:i:s");

agc_2-X/trunk/LANG_www/agc_es/call_log_display.php

@@ -27,6 +27,7 @@
 # 50711-1202 - removed HTTP authentication in favor of user/pass vars
 # 60323-1550 - added option for showing different number dialed in log
 # 60421-1401 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1202 - Added variable filters to close security holes for login form
 # 
 
 require("dbconnect.php");
@@ -47,6 +48,9 @@ if (isset($_GET["exten"]))				{$exten=$_GET["exten"];}
 if (isset($_GET["protocol"]))				{$protocol=$_GET["protocol"];}
 	elseif (isset($_POST["protocol"]))		{$protocol=$_POST["protocol"];}
 
+$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+
 # default optional vars if not set
 if (!isset($format))   {$format="text";}
 if (!isset($in_limit))   {$in_limit="100";}
@@ -54,8 +58,8 @@ if (!isset($out_limit))   {$out_limit="100";}
 $number_dialed = 'number_dialed';
 #$number_dialed = 'extension';
 
-$version = '0.0.7';
+$version = '0.0.8';
-$build = '60421-1401';
+$build = '60619-1202';
 $StarTtime = date("U");
 $NOW_DATE = date("Y-m-d");
 $NOW_TIME = date("Y-m-d H:i:s");

agc_2-X/trunk/LANG_www/agc_es/conf_exten_check.php

@@ -31,6 +31,7 @@
 # 51121-1353 - Altered echo statements for several small PHP speed optimizations
 # 60410-1424 - Added ability to grab calls-being-placed and agent status
 # 60421-1405 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1201 - Added variable filters to close security holes for login form
 #
 
 require("dbconnect.php");
@@ -59,13 +60,16 @@ if (isset($_GET["auto_dial_level"]))			{$auto_dial_level=$_GET["auto_dial_level"
 if (isset($_GET["campagentstdisp"]))			{$campagentstdisp=$_GET["campagentstdisp"];}
 	elseif (isset($_POST["campagentstdisp"]))	{$campagentstdisp=$_POST["campagentstdisp"];}
 
+$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+
 # default optional vars if not set
 if (!isset($format))   {$format="text";}
 if (!isset($ACTION))   {$ACTION="refresh";}
 if (!isset($client))   {$client="agc";}
 
-$version = '0.0.8';
+$version = '0.0.9';
-$build = '60421-1405';
+$build = '60619-1201';
 $StarTtime = date("U");
 $NOW_DATE = date("Y-m-d");
 $NOW_TIME = date("Y-m-d H:i:s");

agc_2-X/trunk/LANG_www/agc_es/inbound_popup.php

@@ -29,6 +29,7 @@
 # 50503-1244 - added session_name checking for extra security
 # 50711-1203 - removed HTTP authentication in favor of user/pass vars
 # 60421-1043 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1205 - Added variable filters to close security holes for login form
 #
 
 require("dbconnect.php");
@@ -61,12 +62,14 @@ if (isset($_GET["local_web_callerID_URL_enc"]))			{$local_web_callerID_URL_enc=$
 if (isset($_GET["local_web_callerID_URL_enc"]))			{$local_web_callerID_URL = rawurldecode($local_web_callerID_URL_enc);}
 	else {$local_web_callerID_URL = '';}
 
+$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
 
 # default optional vars if not set
 if (!isset($format))   {$format="text";}
 
-$version = '0.0.5';
+$version = '0.0.6';
-$build = '60421-1043';
+$build = '60619-1205';
 $StarTtime = date("U");
 $NOW_DATE = date("Y-m-d");
 $NOW_TIME = date("Y-m-d H:i:s");

agc_2-X/trunk/LANG_www/agc_es/live_exten_check.php

@@ -27,6 +27,7 @@
 # 50711-1204 - removed HTTP authentication in favor of user/pass vars
 # 60103-1541 - added favorite extens status display
 # 60421-1359 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1203 - Added variable filters to close security holes for login form
 #
 
 require("dbconnect.php");
@@ -51,11 +52,14 @@ if (isset($_GET["favorites_count"]))				{$favorites_count=$_GET["favorites_count
 if (isset($_GET["favorites_list"]))				{$favorites_list=$_GET["favorites_list"];}
 	elseif (isset($_POST["favorites_list"]))		{$favorites_list=$_POST["favorites_list"];}
 
+$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+
 # default optional vars if not set
 if (!isset($format))   {$format="text";}
 
-$version = '1.1.11';
+$version = '1.1.12';
-$build = '60421-1359';
+$build = '60619-1203';
 $StarTtime = date("U");
 $NOW_DATE = date("Y-m-d");
 $NOW_TIME = date("Y-m-d H:i:s");

agc_2-X/trunk/LANG_www/agc_es/manager_send.php

@@ -12,7 +12,7 @@
 #  - $user
 #  - $pass
 # optional variables:
-#  - $ACTION - ('Originate','Redirect','Hangup','Command','Monitor','StopMonitor','SysCIDOriginate','RedirectName','RedirectNameVmail','MonitorConf','StopMonitorConf','RedirectXtra','RedirectVD','HangupConfDial')
+#  - $ACTION - ('Originate','Redirect','Hangup','Command','Monitor','StopMonitor','SysCIDOriginate','RedirectName','RedirectNameVmail','MonitorConf','StopMonitorConf','RedirectXtra','RedirectXtraCX','RedirectVD','HangupConfDial')
 #  - $queryCID - ('CN012345678901234567',...)
 #  - $format - ('text','debug')
 #  - $channel - ('Zap/41-1','SIP/test101-1jut','IAX2/iaxy@iaxy',...)
@@ -58,6 +58,8 @@
 # 51129-1253 - Fixed Hangups of other agents channels in VICIDIAL AD
 # 60310-2022 - Fixed NEXTAVAILABLE bug in leave-3way-call redirect function
 # 60421-1413 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1158 - Added variable filters to close security holes for login form
+# 60809-1544 - Added direct transfers to leave-3ways in consultative transfers
 #
 
 require("dbconnect.php");
@@ -111,14 +113,22 @@ if (isset($_GET["call_server_ip"]))				{$call_server_ip=$_GET["call_server_ip"];
 	elseif (isset($_POST["call_server_ip"]))	{$call_server_ip=$_POST["call_server_ip"];}
 if (isset($_GET["CalLCID"]))				{$CalLCID=$_GET["CalLCID"];}
 	elseif (isset($_POST["CalLCID"]))		{$CalLCID=$_POST["CalLCID"];}
+if (isset($_GET["phone_code"]))				{$phone_code=$_GET["phone_code"];}
+	elseif (isset($_POST["phone_code"]))	{$phone_code=$_POST["phone_code"];}
+if (isset($_GET["phone_number"]))			{$phone_number=$_GET["phone_number"];}
+	elseif (isset($_POST["phone_number"]))	{$phone_number=$_POST["phone_number"];}
+
+$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+$secondS = ereg_replace("[^0-9]","",$secondS);
 
 # default optional vars if not set
 if (!isset($ACTION))   {$ACTION="Originate";}
 if (!isset($format))   {$format="alert";}
 if (!isset($ext_priority))   {$ext_priority="1";}
 
-$version = '0.0.23';
+$version = '0.0.25';
-$build = '60421-1413';
+$build = '60809-1544';
 $StarTtime = date("U");
 $NOW_DATE = date("Y-m-d");
 $NOW_TIME = date("Y-m-d H:i:s");
@@ -391,7 +401,7 @@ if ($ACTION=="Hangup")
 
 
 ######################
-# ACTION=Redirect, RedirectName, RedirectNameVmail, RedirectToPark, RedirectFromPark, RedirectVD
+# ACTION=Redirect, RedirectName, RedirectNameVmail, RedirectToPark, RedirectFromPark, RedirectVD, RedirectXtra, RedirectXtraCX
 # - insert Redirect Manager statement using extensions name
 ######################
 if ($ACTION=="RedirectVD")
@@ -542,6 +552,115 @@ if ($ACTION=="RedirectNameVmail")
 	}
 }
 
+if ($ACTION=="RedirectXtraCX")
+{
+	$row='';   $rowx='';
+	$channel_liveX=1;
+	$channel_liveY=1;
+	if ( (strlen($channel)<3) or (strlen($queryCID)<15) or (strlen($exten)<1) or (strlen($ext_context)<1) or (strlen($ext_priority)<1) or (strlen($extrachannel)<3) )
+	{
+		$channel_liveX=0;
+		$channel_liveY=0;
+		echo "Una de estas variables No es válido:\n";
+		echo "Canal $channel debe ser mayor de 2 caracteres\n";
+		echo "ExtraCanal $extrachannel debe ser mayor de 2 caracteres\n";
+		echo "queryCID $queryCID debe ser mayor de 14 caracteres\n";
+		echo "exten $exten debe ser fijado\n";
+		echo "ext_context $ext_context debe ser fijado\n";
+		echo "ext_priority $ext_priority debe ser fijado\n";
+		echo "\nRedirect Action no enviado\n";
+	}
+	else
+	{
+		if (strlen($call_server_ip)<7) {$call_server_ip = $server_ip;}
+
+		$stmt="SELECT count(*) FROM live_channels where server_ip = '$call_server_ip' and channel='$channel';";
+			if ($format=='debug') {echo "\n<!-- $stmt -->";}
+		$rslt=mysql_query($stmt, $link);
+		$row=mysql_fetch_row($rslt);
+		if ($row[0]==0)
+		{
+			$stmt="SELECT count(*) FROM live_sip_channels where server_ip = '$call_server_ip' and channel='$channel';";
+				if ($format=='debug') {echo "\n<!-- $stmt -->";}
+			$rslt=mysql_query($stmt, $link);
+			$rowx=mysql_fetch_row($rslt);
+			if ($rowx[0]==0)
+			{
+				$channel_liveX=0;
+				echo "Canal $channel no está activo en $call_server_ip, Redirect comando no insertado\n";
+			}	
+		}
+		$stmt="SELECT count(*) FROM live_channels where server_ip = '$server_ip' and channel='$extrachannel';";
+			if ($format=='debug') {echo "\n<!-- $stmt -->";}
+		$rslt=mysql_query($stmt, $link);
+		$row=mysql_fetch_row($rslt);
+		if ($row[0]==0)
+		{
+			$stmt="SELECT count(*) FROM live_sip_channels where server_ip = '$server_ip' and channel='$extrachannel';";
+				if ($format=='debug') {echo "\n<!-- $stmt -->";}
+			$rslt=mysql_query($stmt, $link);
+			$rowx=mysql_fetch_row($rslt);
+			if ($rowx[0]==0)
+			{
+				$channel_liveY=0;
+				echo "Canal $channel no está activo en $server_ip, Redirect comando no insertado\n";
+			}	
+		}
+		if ( ($channel_liveX==1) && ($channel_liveY==1) )
+		{
+			$stmt="SELECT count(*) FROM vicidial_live_agents where lead_id='$lead_id' and user!='$user';";
+				if ($format=='debug') {echo "\n<!-- $stmt -->";}
+			$rslt=mysql_query($stmt, $link);
+			$rowx=mysql_fetch_row($rslt);
+			if ($rowx[0] < 1)
+			{
+				$channel_liveY=0;
+				echo "No Local agent to send call to, Redirect comando no insertado\n";
+			}	
+			else
+			{
+				$stmt="SELECT server_ip,conf_exten,user FROM vicidial_live_agents where lead_id='$lead_id' and user!='$user';";
+					if ($format=='debug') {echo "\n<!-- $stmt -->";}
+				$rslt=mysql_query($stmt, $link);
+				$rowx=mysql_fetch_row($rslt);
+				$dest_server_ip = $rowx[0];
+				$dest_session_id = $rowx[1];
+				$dest_user = $rowx[2];
+				$S='*';
+
+				$D_s_ip = explode('.', $dest_server_ip);
+				if (strlen($D_s_ip[0])<2) {$D_s_ip[0] = "0$D_s_ip[0]";}
+				if (strlen($D_s_ip[0])<3) {$D_s_ip[0] = "0$D_s_ip[0]";}
+				if (strlen($D_s_ip[1])<2) {$D_s_ip[1] = "0$D_s_ip[1]";}
+				if (strlen($D_s_ip[1])<3) {$D_s_ip[1] = "0$D_s_ip[1]";}
+				if (strlen($D_s_ip[2])<2) {$D_s_ip[2] = "0$D_s_ip[2]";}
+				if (strlen($D_s_ip[2])<3) {$D_s_ip[2] = "0$D_s_ip[2]";}
+				if (strlen($D_s_ip[3])<2) {$D_s_ip[3] = "0$D_s_ip[3]";}
+				if (strlen($D_s_ip[3])<3) {$D_s_ip[3] = "0$D_s_ip[3]";}
+				$dest_dialstring = "$D_s_ip[0]$S$D_s_ip[1]$S$D_s_ip[2]$S$D_s_ip[3]$S$dest_session_id$S$lead_id$S$dest_user$S$phone_code$S$phone_number$S$campaign$S";
+
+				$stmt="INSERT INTO vicidial_manager values('','','$NOW_TIME','NEW','N','$call_server_ip','','Redirect','$queryCID','Channel: $channel','Context: $ext_context','Exten: $dest_dialstring','Priority: $ext_priority','CallerID: $queryCID','','','','','');";
+					if ($format=='debug') {echo "\n<!-- $stmt -->";}
+				$rslt=mysql_query($stmt, $link);
+
+				$stmt="INSERT INTO vicidial_manager values('','','$NOW_TIME','NEW','N','$server_ip','','Hangup','$queryCID','Channel: $extrachannel','','','','','','','','','');";
+					if ($format=='debug') {echo "\n<!-- $stmt -->";}
+				$rslt=mysql_query($stmt, $link);
+
+				echo "RedirectXtraCX comando enviado a Canal $channel en $call_server_ip and \nHungup $extrachannel en $server_ip\n";
+			}
+		}
+		else
+		{
+			if ($channel_liveX==1)
+			{$ACTION="Redirect";   $server_ip = $call_server_ip;}
+			if ($channel_liveY==1)
+			{$ACTION="Redirect";   $channel=$extrachannel;}
+
+		}
+	}
+}
+
 if ($ACTION=="RedirectXtra")
 {
 	if ($channel=="$extrachannel")

agc_2-X/trunk/LANG_www/agc_es/park_calls_display.php

@@ -21,6 +21,7 @@
 # 50524-1515 - First build of script
 # 50711-1208 - removed HTTP authentication in favor of user/pass vars
 # 60421-1111 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1205 - Added variable filters to close security holes for login form
 # 
 
 require("dbconnect.php");
@@ -41,12 +42,15 @@ if (isset($_GET["exten"]))					{$exten=$_GET["exten"];}
 if (isset($_GET["protocol"]))				{$protocol=$_GET["protocol"];}
 	elseif (isset($_POST["protocol"]))		{$protocol=$_POST["protocol"];}
 
+$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+
 # default optional vars if not set
 if (!isset($format))		{$format="text";}
 if (!isset($park_limit))	{$park_limit="1000";}
 
-$version = '0.0.3';
+$version = '0.0.4';
-$build = '60421-1111';
+$build = '60619-1205';
 $StarTtime = date("U");
 $NOW_DATE = date("Y-m-d");
 $NOW_TIME = date("Y-m-d H:i:s");

agc_2-X/trunk/LANG_www/agc_es/vdc_db_query.php

@@ -67,6 +67,8 @@
 #  - $recipient - ('ANYONE,'USERONLY')
 #  - $callback_id - ('12345','12346',...)
 #  - $use_internal_dnc - ('Y','N')
+#  - $omit_phone_code - ('Y','N')
+#  - $no_delete_sessions - ('0','1')
 
 # changes
 # 50629-1044 - First build of script
@@ -104,10 +106,11 @@
 # 60609-1148 - Added ability to check for manual dial numbers in DNC
 # 60619-1117 - Added variable filters to close security holes for login form
 # 60623-1414 - Fixed variable filter for phone_code and fixed manual dial logic
-#
+# 60821-1600 - Added ability to omit the phone code on vicidial lead dialing
+# 60821-1647 - Added ability to not delete sessions at logout
 
-$version = '0.0.34';
+$version = '2.0.36';
-$build = '60623-1414';
+$build = '60821-1647';
 
 require("dbconnect.php");
 
@@ -232,6 +235,8 @@ if (isset($_GET["callback_id"]))				{$callback_id=$_GET["callback_id"];}
 	elseif (isset($_POST["callback_id"]))		{$callback_id=$_POST["callback_id"];}
 if (isset($_GET["use_internal_dnc"]))			{$use_internal_dnc=$_GET["use_internal_dnc"];}
 	elseif (isset($_POST["use_internal_dnc"]))	{$use_internal_dnc=$_POST["use_internal_dnc"];}
+if (isset($_GET["omit_phone_code"]))			{$omit_phone_code=$_GET["omit_phone_code"];}
+	elseif (isset($_POST["omit_phone_code"]))	{$omit_phone_code=$_POST["omit_phone_code"];}
 
 
 $user=ereg_replace("[^0-9a-zA-Z]","",$user);
@@ -372,7 +377,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 		$affected_rows=1;
 		$CBleadIDset=1;
 
-		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' and status NOT IN('INACTIVE','DEAD','ARCHIVE');";
+		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where callback_id='$callback_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		}
@@ -534,9 +539,14 @@ if ($ACTION == 'manDiaLnextCaLL')
 				if ($CCID_on) {$CIDstring = "\"$MqueryCID\" <$CCID>";}
 				else {$CIDstring = "$MqueryCID";}
 
+				### whether to omit phone_code or not
+				if (eregi('Y',$omit_phone_code)) 
+					{$Ndialstring = "$Local_out_prefix$phone_number";}
+				else
+					{$Ndialstring = "$Local_out_prefix$phone_code$phone_number";}
 				### insert the call action into the vicidial_manager table to initiate the call
 				#	$stmt = "INSERT INTO vicidial_manager values('','','$NOW_TIME','NEW','N','$server_ip','','Originate','$MqueryCID','Exten: $conf_exten','Context: $ext_context','Channel: $local_DEF$Local_out_prefix$phone_code$phone_number$local_AMP$ext_context','Priority: 1','Callerid: $CIDstring','Timeout: $Local_dial_timeout','','','','');";
-				$stmt = "INSERT INTO vicidial_manager values('','','$NOW_TIME','NEW','N','$server_ip','','Originate','$MqueryCID','Exten: $Local_out_prefix$phone_code$phone_number','Context: $ext_context','Channel: $local_DEF$conf_exten$local_AMP$ext_context$Local_persist','Priority: 1','Callerid: $CIDstring','Timeout: $Local_dial_timeout','','','','');";
+				$stmt = "INSERT INTO vicidial_manager values('','','$NOW_TIME','NEW','N','$server_ip','','Originate','$MqueryCID','Exten: $Ndialstring','Context: $ext_context','Channel: $local_DEF$conf_exten$local_AMP$ext_context$Local_persist','Priority: 1','Callerid: $CIDstring','Timeout: $Local_dial_timeout','','','','');";
 				if ($DB) {echo "$stmt\n";}
 				$rslt=mysql_query($stmt, $link);
 				}
@@ -653,9 +663,14 @@ if ($ACTION == 'manDiaLonly')
 		if ($CCID_on) {$CIDstring = "\"$MqueryCID\" <$CCID>";}
 		else {$CIDstring = "$MqueryCID";}
 
+		### whether to omit phone_code or not
+		if (eregi('Y',$omit_phone_code)) 
+			{$Ndialstring = "$Local_out_prefix$phone_number";}
+		else
+			{$Ndialstring = "$Local_out_prefix$phone_code$phone_number";}
 		### insert the call action into the vicidial_manager table to initiate the call
 		#	$stmt = "INSERT INTO vicidial_manager values('','','$NOW_TIME','NEW','N','$server_ip','','Originate','$MqueryCID','Exten: $conf_exten','Context: $ext_context','Channel: $local_DEF$Local_out_prefix$phone_code$phone_number$local_AMP$ext_context','Priority: 1','Callerid: $CIDstring','Timeout: $Local_dial_timeout','','','','');";
-		$stmt = "INSERT INTO vicidial_manager values('','','$NOW_TIME','NEW','N','$server_ip','','Originate','$MqueryCID','Exten: $Local_out_prefix$phone_code$phone_number','Context: $ext_context','Channel: $local_DEF$conf_exten$local_AMP$ext_context$Local_persist','Priority: 1','Callerid: $CIDstring','Timeout: $Local_dial_timeout','','','','');";
+		$stmt = "INSERT INTO vicidial_manager values('','','$NOW_TIME','NEW','N','$server_ip','','Originate','$MqueryCID','Exten: $Ndialstring','Context: $ext_context','Channel: $local_DEF$conf_exten$local_AMP$ext_context$Local_persist','Priority: 1','Callerid: $CIDstring','Timeout: $Local_dial_timeout','','','','');";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
@@ -943,6 +958,46 @@ if ($stage == "end")
 }
 
 
+################################################################################
+### VDADREcheckINCOMING - for auto-dial VICIDiaL dialing this will recheck for
+###                       calls to see if the channel has updated
+################################################################################
+if ($ACTION == 'VDADREcheckINCOMING')
+{
+	$MT[0]='';
+	$row='';   $rowx='';
+	$channel_live=1;
+	if ( (strlen($campaign)<1) || (strlen($server_ip)<1) || (strlen($lead_id)<1) )
+	{
+	$channel_live=0;
+	echo "0\n";
+	echo "Campaña $campaign No es válido\n";
+	echo "lead_id $lead_id No es válido\n";
+	exit;
+	}
+	else
+	{
+	### grab the call and lead info from the vicidial_live_agents table
+	$stmt = "SELECT lead_id,uniqueid,callerid,channel,call_server_ip FROM vicidial_live_agents where server_ip = '$server_ip' and user='$user' and campaign_id='$campaign' and lead_id='$lead_id';";
+	if ($DB) {echo "$stmt\n";}
+	$rslt=mysql_query($stmt, $link);
+	$queue_leadID_ct = mysql_num_rows($rslt);
+
+	if ($queue_leadID_ct > 0)
+		{
+		$row=mysql_fetch_row($rslt);
+		$lead_id	=$row[0];
+		$uniqueid	=$row[1];
+		$callerid	=$row[2];
+		$channel	=$row[3];
+		$call_server_ip	=$row[4];
+			if (strlen($call_server_ip)<7) {$call_server_ip = $server_ip;}
+		echo "1\n" . $lead_id . '|' . $uniqueid . '|' . $callerid . '|' . $channel . '|' . $call_server_ip . "|\n";
+		}
+	}
+}
+
+
 ################################################################################
 ### VDADcheckINCOMING - for auto-dial VICIDiaL dialing this will check for calls
 ###                     in the vicidial_live_agents table in QUEUE status, then
@@ -1183,7 +1238,7 @@ if ($ACTION == 'VDADcheckINCOMING')
 		### If LLAMADABK, change vicidial_callback record to INACTIVE
 		if (eregi("CALLBK|CBHVIEJO", $dispo))
 			{
-			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id';";
+			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' and status NOT IN('INACTIVE','DEAD','ARCHIVE');";
 				if ($format=='debug') {echo "\n<!-- $stmt -->";}
 			$rslt=mysql_query($stmt, $link);
 			}
@@ -1220,11 +1275,14 @@ else
 	$rslt=mysql_query($stmt, $link);
 	$vul_insert = mysql_affected_rows($link);
 
-	##### Remove the reservation en the vicidial_conferences meetme room
+	if ($no_delete_sessions < 1)
-	$stmt="UPDATE vicidial_conferences set extension='' where server_ip='$server_ip' and conf_exten='$conf_exten';";
+		{
-	if ($DB) {echo "$stmt\n";}
+		##### Remove the reservation en the vicidial_conferences meetme room
-	$rslt=mysql_query($stmt, $link);
+		$stmt="UPDATE vicidial_conferences set extension='' where server_ip='$server_ip' and conf_exten='$conf_exten';";
-	$vc_remove = mysql_affected_rows($link);
+		if ($DB) {echo "$stmt\n";}
+		$rslt=mysql_query($stmt, $link);
+		$vc_remove = mysql_affected_rows($link);
+		}
 
 	##### Delete the vicidial_live_agents record for this session
 	$stmt="DELETE from vicidial_live_agents where server_ip='$server_ip' and user ='$user';";

agc_2-X/trunk/LANG_www/agc_es/vicidial.php

@@ -112,6 +112,17 @@
 # 60609-1123 - Added add-number-to-DNC-list function and manual dial check DNC
 # 60619-1047 - Added variable filters to close security holes for login form
 # 60804-1710 - fixed scheduled CALLBK for other languages build
+# 60808-1145 - Added consultative transfers with customer data
+# 60808-2232 - Added campaign name to pulldown for login screen
+# 60809-1603 - Added option to locally transfer consult xfers
+# 60809-1732 - Added recheck of transferred channels before customer gone mesg
+# 60810-1011 - Fixed CXFER leave 3way call bugs
+# 60816-1602 - Added ALLCALLS recording delay option allcalls_delay
+# 60816-1716 - Fixed customer time display bug and client DST setting
+# 60821-1555 - Added option to omit phone_code on dialout of leads
+# 60821-1628 - Added ALLFORCE recording option
+# 60821-1643 - Added no_delete_sessions option to not delete sessions
+# 60822-0512 - Changed phone number fields to be maxlength of 12
 #
 
 require("dbconnect.php");
@@ -157,8 +168,8 @@ if (isset($_GET["relogin"]))					{$relogin=$_GET["relogin"];}
 
 $forever_stop=0;
 
-$version = '1.1.86';
+$version = '2.0.96';
-$build = '60804-1710';
+$build = '60821-1643';
 
 if ($force_logout)
 {
@@ -166,6 +177,7 @@ if ($force_logout)
     exit;
 }
 
+$isdst = date("I");
 $StarTtimE = date("U");
 $NOW_TIME = date("Y-m-d H:i:s");
 $tsNOW_TIME = date("YmdHis");
@@ -174,6 +186,7 @@ $CIDdate = date("ymdHis");
 	$month_old = mktime(0, 0, 0, date("m"), date("d")-2,  date("Y"));
 	$past_month_date = date("Y-m-d H:i:s",$month_old);
 
+
 $random = (rand(1000000, 9999999) + 10000000);
 
 $conf_silent_prefix		= '7';	# vicidial_conferences prefix to enter silently
@@ -186,6 +199,11 @@ $view_scripts			= '1';	# set to 1 to show the SCRIPTS tab
 $dispo_check_all_pause	= '0';	# set to 1 to allow for persistent pause after dispo
 $agentcallsstatus		= '0';	# set to 1 to show agent status and call count
    $campagentstatctmax	= '0';	# Number of segundos for campaign call and agent stats
+$show_campname_pulldown	= '1';	# set to 1 to show campaign name en login pulldown
+$webform_sessionname	= '1';	# set to 1 to include the session_name in webform URL
+$local_consult_xfers	= '1';	# set to 1 to send consultative transfers from original server
+$clientDST				= '1';	# set to 1 to check for DST en server for agent time
+$no_delete_sessions		= '0';	# set to 1 to not delete sessions at logout
 
 $TEST_all_statuses		= '0';	# TEST variable allows all statuses in dispo screen
 
@@ -223,7 +241,7 @@ if ($campaign_login_list > 0)
 $camp_form_code  = "<select size=1 name=VD_campaign>\n";
 $camp_form_code .= "<option value=\"\"></option>\n";
 
-$stmt="SELECT campaign_id from vicidial_campaigns where active='Y' order by campaign_id";
+$stmt="SELECT campaign_id,campaign_name from vicidial_campaigns where active='Y' order by campaign_id";
 $rslt=mysql_query($stmt, $link);
 $camps_to_print = mysql_num_rows($rslt);
 
@@ -231,15 +249,19 @@ $o=0;
 while ($camps_to_print > $o) 
 	{
 	$rowx=mysql_fetch_row($rslt);
+	if ($show_campname_pulldown)
+		{$campname = " - $rowx[1]";}
+	else
+		{$campname = '';}
 	if ($VD_campaign)
 		{
 		if (eregi("$VD_campaign",$rowx[0]))
-			{$camp_form_code .= "<option value=\"$rowx[0]\" SELECTED>$rowx[0]</option>\n";}
+			{$camp_form_code .= "<option value=\"$rowx[0]\" SELECTED>$rowx[0]$campname</option>\n";}
 		else
-			{$camp_form_code .= "<option value=\"$rowx[0]\">$rowx[0]</option>\n";}
+			{$camp_form_code .= "<option value=\"$rowx[0]\">$rowx[0]$campname</option>\n";}
 		}
 	else
-		{$camp_form_code .= "<option value=\"$rowx[0]\">$rowx[0]</option>\n";}
+		{$camp_form_code .= "<option value=\"$rowx[0]\">$rowx[0]$campname</option>\n";}
 	$o++;
 	}
 $camp_form_code .= "</select>\n";
@@ -261,7 +283,7 @@ echo "<!-- ILPV -->\n";
 echo "<TD WIDTH=100 ALIGN=RIGHT VALIGN=TOP  NOWRAP><a href=\"../agc_en/vicidial.php?relogin=YES&VD_login=$VD_login&VD_campaign=$VD_campaign&phone_login=$phone_login&phone_pass=$phone_pass&VD_pass=$VD_pass\">English <img src=\"../agc/images/en.gif\" BORDER=0 HEIGHT=14 WIDTH=20></a></TD>\n";echo "<TD WIDTH=100 ALIGN=RIGHT VALIGN=TOP  BGCOLOR=\"#CCFFCC\" NOWRAP><a href=\"../agc_es/vicidial.php?relogin=YES&VD_login=$VD_login&VD_campaign=$VD_campaign&phone_login=$phone_login&phone_pass=$phone_pass&VD_pass=$VD_pass\">Español <img src=\"../agc/images/es.gif\" BORDER=0 HEIGHT=14 WIDTH=20></a></TD>\n";echo "</TR></TABLE>\n";
 echo "<FORM ACTION=\"$agcPAGE\" METHOD=POST>\n";
 echo "<INPUT TYPE=HIDDEN NAME=DB VALUE=\"$DB\">\n";
-echo "<BR><BR><BR><CENTER><TABLE WIDTH=360 CELLPADDING=0 CELLSPACING=0 BGCOLOR=\"#E0C2D6\"><TR BGCOLOR=WHITE>";
+echo "<BR><BR><BR><CENTER><TABLE WIDTH=460 CELLPADDING=0 CELLSPACING=0 BGCOLOR=\"#E0C2D6\"><TR BGCOLOR=WHITE>";
 echo "<TD ALIGN=LEFT VALIGN=BOTTOM><IMG SRC=\"../agc/images/vdc_tab_vicidial.gif\" Border=0></TD>";
 echo "<TD ALIGN=CENTER VALIGN=MIDDLE> Conexión Otra Vez </TD>";
 echo "</TR>\n";
@@ -300,7 +322,7 @@ echo "<TD WIDTH=100 ALIGN=RIGHT VALIGN=TOP  NOWRAP><a href=\"../agc_en/vicidial.
 	#echo "<INPUT TYPE=HIDDEN NAME=phone_login VALUE=\"$phone_login\">\n";
 	#echo "<INPUT TYPE=HIDDEN NAME=phone_pass VALUE=\"$phone_pass\">\n";
 	echo "<CENTER><BR><B>Conexión Del Usuario</B><BR><BR>";
-	echo "<TABLE WIDTH=360 CELLPADDING=0 CELLSPACING=0 BGCOLOR=\"#E0C2D6\"><TR BGCOLOR=WHITE>";
+	echo "<TABLE WIDTH=460 CELLPADDING=0 CELLSPACING=0 BGCOLOR=\"#E0C2D6\"><TR BGCOLOR=WHITE>";
 	echo "<TD ALIGN=LEFT VALIGN=BOTTOM><IMG SRC=\"../agc/images/vdc_tab_vicidial.gif\" Border=0></TD>";
 	echo "<TD ALIGN=CENTER VALIGN=MIDDLE> Conexión en la Campaña </TD>";
 	echo "</TR>\n";
@@ -338,7 +360,7 @@ echo "<TD WIDTH=100 ALIGN=RIGHT VALIGN=TOP  NOWRAP><a href=\"../agc_en/vicidial.
 echo "<TD WIDTH=100 ALIGN=RIGHT VALIGN=TOP  NOWRAP><a href=\"../agc_en/vicidial.php?relogin=YES&VD_login=$VD_login&VD_campaign=$VD_campaign&phone_login=$phone_login&phone_pass=$phone_pass&VD_pass=$VD_pass\">English <img src=\"../agc/images/en.gif\" BORDER=0 HEIGHT=14 WIDTH=20></a></TD>\n";echo "<TD WIDTH=100 ALIGN=RIGHT VALIGN=TOP  BGCOLOR=\"#CCFFCC\" NOWRAP><a href=\"../agc_es/vicidial.php?relogin=YES&VD_login=$VD_login&VD_campaign=$VD_campaign&phone_login=$phone_login&phone_pass=$phone_pass&VD_pass=$VD_pass\">Español <img src=\"../agc/images/es.gif\" BORDER=0 HEIGHT=14 WIDTH=20></a></TD>\n";		echo "</TR></TABLE>\n";
 		echo "<FORM ACTION=\"$agcPAGE\" METHOD=POST>\n";
 		echo "<INPUT TYPE=HIDDEN NAME=DB VALUE=\"$DB\">\n";
-		echo "<BR><BR><BR><CENTER><TABLE WIDTH=360 CELLPADDING=0 CELLSPACING=0 BGCOLOR=\"#E0C2D6\"><TR BGCOLOR=WHITE>";
+		echo "<BR><BR><BR><CENTER><TABLE WIDTH=460 CELLPADDING=0 CELLSPACING=0 BGCOLOR=\"#E0C2D6\"><TR BGCOLOR=WHITE>";
 		echo "<TD ALIGN=LEFT VALIGN=BOTTOM><IMG SRC=\"../agc/images/vdc_tab_vicidial.gif\" Border=0></TD>";
 		echo "<TD ALIGN=CENTER VALIGN=MIDDLE> Conexión </TD>";
 		echo "</TR>\n";
@@ -375,7 +397,7 @@ echo "<!-- ILPV -->\n";
 echo "<TD WIDTH=100 ALIGN=RIGHT VALIGN=TOP  NOWRAP><a href=\"../agc_en/vicidial.php?relogin=YES&VD_login=$VD_login&VD_campaign=$VD_campaign&phone_login=$phone_login&phone_pass=$phone_pass&VD_pass=$VD_pass\">English <img src=\"../agc/images/en.gif\" BORDER=0 HEIGHT=14 WIDTH=20></a></TD>\n";echo "<TD WIDTH=100 ALIGN=RIGHT VALIGN=TOP  BGCOLOR=\"#CCFFCC\" NOWRAP><a href=\"../agc_es/vicidial.php?relogin=YES&VD_login=$VD_login&VD_campaign=$VD_campaign&phone_login=$phone_login&phone_pass=$phone_pass&VD_pass=$VD_pass\">Español <img src=\"../agc/images/es.gif\" BORDER=0 HEIGHT=14 WIDTH=20></a></TD>\n";echo "</TR></TABLE>\n";
 echo "<FORM ACTION=\"$agcPAGE\" METHOD=POST>\n";
 echo "<INPUT TYPE=HIDDEN NAME=DB VALUE=\"$DB\">\n";
-echo "<BR><BR><BR><CENTER><TABLE WIDTH=360 CELLPADDING=0 CELLSPACING=0 BGCOLOR=\"#E0C2D6\"><TR BGCOLOR=WHITE>";
+echo "<BR><BR><BR><CENTER><TABLE WIDTH=460 CELLPADDING=0 CELLSPACING=0 BGCOLOR=\"#E0C2D6\"><TR BGCOLOR=WHITE>";
 echo "<TD ALIGN=LEFT VALIGN=BOTTOM><IMG SRC=\"../agc/images/vdc_tab_vicidial.gif\" Border=0></TD>";
 echo "<TD ALIGN=CENTER VALIGN=MIDDLE> Conexión Del Teléfono </TD>";
 echo "</TR>\n";
@@ -513,7 +535,7 @@ $VDloginDISPLAY=0;
 			$HKstatusnames = substr("$HKstatusnames", 0, -1); 
 
 			##### grab the statuses to be dialed for your campaign as well as other campaign settings
-			$stmt="SELECT dial_status_a,dial_status_b,dial_status_c,dial_status_d,dial_status_e,park_ext,park_file_name,web_form_address,allow_closers,auto_dial_level,dial_timeout,dial_prefix,campaign_cid,campaign_vdad_exten,campaign_rec_exten,campaign_recording,campaign_rec_filename,campaign_script,get_call_launch,am_message_exten,xferconf_a_dtmf,xferconf_a_number,xferconf_b_dtmf,xferconf_b_number,alt_number_dialing,scheduled_callbacks,wrapup_seconds,wrapup_message,closer_campaigns,use_internal_dnc FROM vicidial_campaigns where campaign_id = '$VD_campaign';";
+			$stmt="SELECT dial_status_a,dial_status_b,dial_status_c,dial_status_d,dial_status_e,park_ext,park_file_name,web_form_address,allow_closers,auto_dial_level,dial_timeout,dial_prefix,campaign_cid,campaign_vdad_exten,campaign_rec_exten,campaign_recording,campaign_rec_filename,campaign_script,get_call_launch,am_message_exten,xferconf_a_dtmf,xferconf_a_number,xferconf_b_dtmf,xferconf_b_number,alt_number_dialing,scheduled_callbacks,wrapup_seconds,wrapup_message,closer_campaigns,use_internal_dnc,allcalls_delay,omit_phone_code FROM vicidial_campaigns where campaign_id = '$VD_campaign';";
 			$rslt=mysql_query($stmt, $link);
 			if ($DB) {echo "$stmt\n";}
 			$row=mysql_fetch_row($rslt);
@@ -547,6 +569,8 @@ $VDloginDISPLAY=0;
 			   $wrapup_message=$row[27];
 			   $closer_campaigns=$row[28];
 			   $use_internal_dnc=$row[29];
+			   $allcalls_delay=$row[30];
+			   $omit_phone_code=$row[31];
 
 			if ( ($VC_scheduled_callbacks=='Y') and ($VU_scheduled_callbacks=='1') )
 				{$scheduled_callbacks='1';}
@@ -616,7 +640,7 @@ echo "<TD WIDTH=100 ALIGN=RIGHT VALIGN=TOP  NOWRAP><a href=\"../agc_en/vicidial.
 	echo "<INPUT TYPE=HIDDEN NAME=phone_login VALUE=\"$phone_login\">\n";
 	echo "<INPUT TYPE=HIDDEN NAME=phone_pass VALUE=\"$phone_pass\">\n";
 	echo "<CENTER><BR><B>$VDdisplayMESSAGE</B><BR><BR>";
-	echo "<TABLE WIDTH=360 CELLPADDING=0 CELLSPACING=0 BGCOLOR=\"#E0C2D6\"><TR BGCOLOR=WHITE>";
+	echo "<TABLE WIDTH=460 CELLPADDING=0 CELLSPACING=0 BGCOLOR=\"#E0C2D6\"><TR BGCOLOR=WHITE>";
 	echo "<TD ALIGN=LEFT VALIGN=BOTTOM><IMG SRC=\"../agc/images/vdc_tab_vicidial.gif\" Border=0></TD>";
 	echo "<TD ALIGN=CENTER VALIGN=MIDDLE> Conexión en la Campaña </TD>";
 	echo "</TR>\n";
@@ -655,7 +679,7 @@ echo "<TD WIDTH=100 ALIGN=RIGHT VALIGN=TOP  NOWRAP><a href=\"../agc_en/vicidial.
 	echo "<INPUT TYPE=HIDDEN NAME=VD_login VALUE=\"$VD_login\">\n";
 	echo "<INPUT TYPE=HIDDEN NAME=VD_pass VALUE=\"$VD_pass\">\n";
 	echo "<INPUT TYPE=HIDDEN NAME=VD_campaign VALUE=\"$VD_campaign\">\n";
-	echo "<BR><BR><BR><CENTER><TABLE WIDTH=360 CELLPADDING=0 CELLSPACING=0 BGCOLOR=\"#E0C2D6\"><TR BGCOLOR=WHITE>";
+	echo "<BR><BR><BR><CENTER><TABLE WIDTH=460 CELLPADDING=0 CELLSPACING=0 BGCOLOR=\"#E0C2D6\"><TR BGCOLOR=WHITE>";
 	echo "<TD ALIGN=LEFT VALIGN=BOTTOM><IMG SRC=\"../agc/images/vdc_tab_vicidial.gif\" Border=0></TD>";
 	echo "<TD ALIGN=CENTER VALIGN=MIDDLE> Conexión Error</TD>";
 	echo "</TR>\n";
@@ -740,6 +764,10 @@ else
 	$DBX_pass=$row[58];
 	$DBX_port=$row[59];
 
+	if ($clientDST)
+		{
+		$local_gmt = ($local_gmt + $isdst);
+		}
 	if ($protocol == 'EXTERNAL')
 		{
 		$protocol = 'Local';
@@ -795,6 +823,11 @@ else
 	$session_rand = (rand(1,9999999) + 10000000);
 	$session_name = "$StarTtimE$US$session_ext$session_rand";
 
+	if ($webform_sessionname)
+		{$webform_sessionname = "&session_name=$session_name";}
+	else
+		{$webform_sessionname = '';}
+
 	$stmt="DELETE from web_client_sessions where start_time < '$past_month_date' and extension='$extension' and server_ip = '$server_ip' and program = 'vicidial';";
 	if ($DB) {echo "|$stmt|\n";}
 	$rslt=mysql_query($stmt, $link);
@@ -1313,6 +1346,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	var previous_called_count = '';
 	var hot_keys_active = 0;
 	var all_record = 'NO';
+	var all_record_count = 0;
 	var LeaDDispO = '';
 	var LeaDPreVDispO = '';
 	var AgaiNHanguPChanneL = '';
@@ -1320,8 +1354,8 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	var AgainCalLSecondS = '';
 	var AgaiNCalLCID = '';
 	var CB_count_check = 60;
-	var agentcallsstatus = '<? echo $agentcallsstatus ?>';
+	var agentcallsstatus = '<? echo $agentcallsstatus ?>'
-	var campagentstatctmax = '<? echo $campagentstatctmax ?>';
+	var campagentstatctmax = '<? echo $campagentstatctmax ?>'
 	var campagentstatct = '0';
 	var manual_dial_in_progress = 0;
 	var auto_dial_alt_dial = 0;
@@ -1339,7 +1373,12 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	var wrapup_message = '<? echo $wrapup_message ?>';
 	var wrapup_counter = 0;
 	var wrapup_waiting = 0;
-	var use_internal_dnc = '<? echo $use_internal_dnc ?>'
+	var use_internal_dnc = '<? echo $use_internal_dnc ?>';
+	var allcalls_delay = '<? echo $allcalls_delay ?>';
+	var omit_phone_code = '<? echo $omit_phone_code ?>';
+	var no_delete_sessions = '<? echo $no_delete_sessions ?>';
+	var webform_session = '<? echo $webform_sessionname ?>';
+	var local_consult_xfers = '<? echo $local_consult_xfers ?>';
 	var DiaLControl_auto_HTML = "<IMG SRC=\"../agc/images/vdc_LB_pause_OFF_es.gif\" border=0 alt=\"Pausa\"><a href=\"#\" onclick=\"AutoDial_ReSume_PauSe('VDADready');\"><IMG SRC=\"../agc/images/vdc_LB_resume_es.gif\" border=0 alt=\"Comienzo\"></a>";
 	var DiaLControl_auto_HTML_ready = "<a href=\"#\" onclick=\"AutoDial_ReSume_PauSe('VDADpause');\"><IMG SRC=\"../agc/images/vdc_LB_pause_es.gif\" border=0 alt=\"Pausa\"></a><IMG SRC=\"../agc/images/vdc_LB_resume_OFF_es.gif\" border=0 alt=\"Comienzo\">";
 	var DiaLControl_auto_HTML_OFF = "<IMG SRC=\"../agc/images/vdc_LB_pause_OFF_es.gif\" border=0 alt=\"Pausa\"><IMG SRC=\"../agc/images/vdc_LB_resume_OFF_es.gif\" border=0 alt=\"Comienzo\">";
@@ -1480,18 +1519,26 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 			var manual_number = document.vicidial_form.xfernumber.value;
 			var manual_string = manual_number.toString();
 			}
-		if (document.vicidial_form.xferoverride.checked==false)
+		var regXFvars = new RegExp("TRANSFERENCIA","g");
+		if (manual_string.match(regXFvars))
 			{
-			if (manual_string.length=='11')
+			var donothing=1;
-				{manual_string = "9" + manual_string;}
+			}
-			 else
+		else
+			{
+			if (document.vicidial_form.xferoverride.checked==false)
 				{
-				if (manual_string.length=='10')
+				if (manual_string.length=='11')
-					{manual_string = "91" + manual_string;}
+					{manual_string = "9" + manual_string;}
 				 else
 					{
-					if (manual_string.length=='7')
+					if (manual_string.length=='10')
-						{manual_string = "9" + manual_string;}
+						{manual_string = "91" + manual_string;}
+					 else
+						{
+						if (manual_string.length=='7')
+							{manual_string = "9" + manual_string;}
+						}
 					}
 				}
 			}
@@ -1527,8 +1574,28 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 			xmlhttp = new XMLHttpRequest();
 			}
 		if (xmlhttp) 
-			{ 
+			{
-
+			var regCXFvars = new RegExp("CTRANSFERENCIA","g");
+			var tasknum_string = tasknum.toString();
+			if (tasknum_string.match(regCXFvars))
+				{
+				var Ctasknum = tasknum_string.replace(regCXFvars, '');
+				if (Ctasknum.length < 2)
+					{Ctasknum = '990009';}
+				var closerxfercamptail = '_L' + document.vicidial_form.xfercode.value;
+				tasknum = Ctasknum + "*CL_" + campaign + '' + closerxfercamptail + '**' + document.vicidial_form.lead_id.value + '**' + document.vicidial_form.phone_number.value + '*' + user + '*';
+				}
+			var regAXFvars = new RegExp("ATRANSFERENCIA","g");
+			if (tasknum_string.match(regAXFvars))
+				{
+				var Ctasknum = tasknum_string.replace(regAXFvars, '');
+				if (Ctasknum.length < 2)
+					{Ctasknum = '83009';}
+				var closerxfercamptail = '_L' + document.vicidial_form.xfercode.value;
+				if (closerxfercamptail.length < 3)
+					{closerxfercamptail = 'IVR';}
+				tasknum = Ctasknum + '*' + document.vicidial_form.phone_number.value + '*' + document.vicidial_form.lead_id.value + '*' + campaign + '*' + closerxfercamptail + '*' + user + '*';
+				}
 			if (taskprefix == 'NO') {var orig_prefix = '';}
 			  else {var orig_prefix = agc_dial_prefix;}
 			if (taskreverse == 'YES')
@@ -1849,7 +1916,15 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 				var query_recording_exten = recording_exten;
 				var channelrec = "Local/" + conf_silent_prefix + '' + taskconfrec + "@" + ext_context;
 				var conf_rec_start_html = "<a href=\"#\" onclick=\"conf_send_recording('StopMonitorConf','" + taskconfrec + "','" + filename + "');return false;\"><IMG SRC=\"../agc/images/vdc_LB_stoprecording_es.gif\" border=0 alt=\"Parar La Grabación\"></a>";
-				document.getElementById("RecorDControl").innerHTML = conf_rec_start_html;
+
+				if (campaign_recording == 'ALLFORCE')
+					{
+					document.getElementById("RecorDControl").innerHTML = "<IMG SRC=\"../agc/images/vdc_LB_startrecording_OFF.gif\" border=0 alt=\"Comenzar La Grabación\">";
+					}
+				else
+					{
+					document.getElementById("RecorDControl").innerHTML = conf_rec_start_html;
+					}
 			}
 			if (taskconfrectype == 'StopMonitorConf')
 				{
@@ -1857,7 +1932,14 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 				var query_recording_exten = session_id;
 				var channelrec = "Local/" + conf_silent_prefix + '' + taskconfrec + "@" + ext_context;
 				var conf_rec_start_html = "<a href=\"#\" onclick=\"conf_send_recording('MonitorConf','" + taskconfrec + "','');return false;\"><IMG SRC=\"../agc/images/vdc_LB_startrecording_es.gif\" border=0 alt=\"Comenzar La Grabación\"></a>";
-				document.getElementById("RecorDControl").innerHTML = conf_rec_start_html;
+				if (campaign_recording == 'ALLFORCE')
+					{
+					document.getElementById("RecorDControl").innerHTML = "<IMG SRC=\"../agc/images/vdc_LB_startrecording_OFF.gif\" border=0 alt=\"Comenzar La Grabación\">";
+					}
+				else
+					{
+					document.getElementById("RecorDControl").innerHTML = conf_rec_start_html;
+					}
 				}
 			confmonitor_query = "server_ip=" + server_ip + "&session_name=" + session_name + "&user=" + user + "&pass=" + pass + "&ACTION=" + taskconfrectype + "&format=text&channel=" + channelrec + "&filename=" + filename + "&exten=" + query_recording_exten + "&ext_context=" + ext_context + "&ext_priority=1";
 			xmlhttp.open('POST', 'manager_send.php'); 
@@ -1927,18 +2009,36 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 				{
 				var queryCID = "XBvdcW" + epoch_sec + user_abb;
 				var blindxferdialstring = document.vicidial_form.xfernumber.value;
-				if (document.vicidial_form.xferoverride.checked==false)
+				var regXFvars = new RegExp("TRANSFERENCIA","g");
+				if (blindxferdialstring.match(regXFvars))
 					{
-					if (blindxferdialstring.length=='11')
+					var regAXFvars = new RegExp("ATRANSFERENCIA","g");
-						{blindxferdialstring = dial_prefix + "" + blindxferdialstring;}
+					if (blindxferdialstring.match(regAXFvars))
-					 else
 						{
-						if (blindxferdialstring.length=='10')
+						var Ctasknum = blindxferdialstring.replace(regAXFvars, '');
-							{blindxferdialstring = dial_prefix + "1" + blindxferdialstring;}
+						if (Ctasknum.length < 2)
+							{Ctasknum = '83009';}
+						var closerxfercamptail = '_L' + document.vicidial_form.xfercode.value;
+						if (closerxfercamptail.length < 3)
+							{closerxfercamptail = 'IVR';}
+						blindxferdialstring = Ctasknum + '*' + document.vicidial_form.phone_number.value + '*' + document.vicidial_form.lead_id.value + '*' + campaign + '*' + closerxfercamptail + '*' + user + '*';
+						}
+					}
+				else
+					{
+					if (document.vicidial_form.xferoverride.checked==false)
+						{
+						if (blindxferdialstring.length=='11')
+							{blindxferdialstring = dial_prefix + "" + blindxferdialstring;}
 						 else
 							{
-							if (blindxferdialstring.length=='7')
+							if (blindxferdialstring.length=='10')
-								{blindxferdialstring = dial_prefix + ""  + blindxferdialstring;}
+								{blindxferdialstring = dial_prefix + "1" + blindxferdialstring;}
+							 else
+								{
+								if (blindxferdialstring.length=='7')
+									{blindxferdialstring = dial_prefix + ""  + blindxferdialstring;}
+								}
 							}
 						}
 					}
@@ -1996,7 +2096,14 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 				var queryCID = "VXvdcW" + epoch_sec + user_abb;
 				var redirectdestination = "NEXTAVAILABLE";
 				var redirectXTRAvalue = XDchannel;
-				xferredirect_query = "server_ip=" + server_ip + "&session_name=" + session_name + "&user=" + user + "&pass=" + pass + "&ACTION=RedirectXtra&format=text&channel=" + redirectvalue + "&call_server_ip=" + redirectserverip + "&queryCID=" + queryCID + "&exten=" + redirectdestination + "&ext_context=" + ext_context + "&ext_priority=1&extrachannel=" + redirectXTRAvalue;
+				var redirecttype_test = document.vicidial_form.xfernumber.value;
+				var closerxfercamptail = '_L' + document.vicidial_form.xfercode.value;
+				var regRXFvars = new RegExp("CTRANSFERENCIA","g");
+				if ( (redirecttype_test.match(regRXFvars)) && (local_consult_xfers > 0) )
+					{var redirecttype = 'RedirectXtraCX';}
+				else
+					{var redirecttype = 'RedirectXtra';}
+				xferredirect_query = "server_ip=" + server_ip + "&session_name=" + session_name + "&user=" + user + "&pass=" + pass + "&ACTION=" + redirecttype + "&format=text&channel=" + redirectvalue + "&call_server_ip=" + redirectserverip + "&queryCID=" + queryCID + "&exten=" + redirectdestination + "&ext_context=" + ext_context + "&ext_priority=1&extrachannel=" + redirectXTRAvalue + "&lead_id=" + document.vicidial_form.lead_id.value + "&phone_code=" + document.vicidial_form.phone_code.value + "&phone_number=" + document.vicidial_form.phone_number.value + "&campaign=CL_" + campaign + '' + closerxfercamptail;
 				}
 			if (taskvar == 'ParK')
 				{
@@ -2136,7 +2243,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						if ( (taskMDstage != "start") && (VDstop_rec_after_each_call == 1) )
 							{
 							var conf_rec_start_html = "<a href=\"#\" onclick=\"conf_send_recording('MonitorConf','" + session_id + "','');return false;\"><IMG SRC=\"../agc/images/vdc_LB_startrecording_es.gif\" border=0 alt=\"Comenzar La Grabación\"></a>";
-							if (campaign_recording == 'NEVER')
+							if ( (campaign_recording == 'NEVER') || (campaign_recording == 'ALLFORCE') )
 								{
 								document.getElementById("RecorDControl").innerHTML = "<IMG SRC=\"../agc/images/vdc_LB_startrecording_OFF.gif\" border=0 alt=\"Comenzar La Grabación\">";
 								}
@@ -2527,6 +2634,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	function ManualDialNext(mdnCBid,mdnBDleadid,mdnDiaLCodE,mdnPhonENumbeR,mdnStagE)
 		{
 		all_record = 'NO';
+		all_record_count=0;
 		document.getElementById("DiaLControl").innerHTML = "<IMG SRC=\"../agc/images/vdc_LB_dialnextnumber_OFF_es.gif\" border=0 alt=\"Marcar el Siguiente Número\">";
 		if (document.vicidial_form.LeadPreview.checked==true)
 			{
@@ -2562,7 +2670,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 			}
 		if (xmlhttp) 
 			{ 
-			manDiaLnext_query = "server_ip=" + server_ip + "&session_name=" + session_name + "&ACTION=manDiaLnextCaLL&conf_exten=" + session_id + "&user=" + user + "&pass=" + pass + "&campaign=" + campaign + "&ext_context=" + ext_context + "&dial_timeout=" + dial_timeout + "&dial_prefix=" + dial_prefix + "&campaign_cid=" + campaign_cid + "&preview=" + man_preview + "&agent_log_id=" + agent_log_id + "&callback_id=" + mdnCBid + "&lead_id=" + mdnBDleadid + "&phone_code=" + mdnDiaLCodE + "&phone_number=" + mdnPhonENumbeR + "&list_id=" + mdnLisT_id + "&stage=" + mdnStagE  + "&use_internal_dnc=" + use_internal_dnc ;
+			manDiaLnext_query = "server_ip=" + server_ip + "&session_name=" + session_name + "&ACTION=manDiaLnextCaLL&conf_exten=" + session_id + "&user=" + user + "&pass=" + pass + "&campaign=" + campaign + "&ext_context=" + ext_context + "&dial_timeout=" + dial_timeout + "&dial_prefix=" + dial_prefix + "&campaign_cid=" + campaign_cid + "&preview=" + man_preview + "&agent_log_id=" + agent_log_id + "&callback_id=" + mdnCBid + "&lead_id=" + mdnBDleadid + "&phone_code=" + mdnDiaLCodE + "&phone_number=" + mdnPhonENumbeR + "&list_id=" + mdnLisT_id + "&stage=" + mdnStagE  + "&use_internal_dnc=" + use_internal_dnc + "&omit_phone_code=" + omit_phone_code;
 			xmlhttp.open('POST', 'vdc_db_query.php'); 
 			xmlhttp.setRequestHeader('Content-Type','application/x-www-form-urlencoded; charset=UTF-8');
 			xmlhttp.send(manDiaLnext_query); 
@@ -2663,7 +2771,8 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						"&session_id=" + session_id + 
 						"&phone=" + document.vicidial_form.phone_number.value + 
 						"&parked_by=" + document.vicidial_form.lead_id.value +
-						"&dispo=" + LeaDDispO;
+						"&dispo=" + LeaDDispO + '' +
+						webform_session;
 						
 // $VICIDIAL_web_QUERY_STRING =~ s/ /+/gi;
 // $VICIDIAL_web_QUERY_STRING =~ s/\`|\~|\:|\;|\#|\'|\"|\{|\}|\(|\)|\*|\^|\%|\$|\!|\%|\r|\t|\n//gi;
@@ -2698,7 +2807,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 							document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_es.gif\" border=0 alt=\"Colgar al Cliente\"></a>";
 
-							if (campaign_recording == 'ALLCALLS')
+							if ( (campaign_recording == 'ALLCALLS') || (campaign_recording == 'ALLFORCE') )
 								{all_record = 'YES';}
 
 							if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -2837,6 +2946,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	function ManualDialOnly(taskaltnum)
 		{
 		all_record = 'NO';
+		all_record_count=0;
 		if (taskaltnum == 'ALTTeléfonoE')
 			{
 			var manDiaLonly_num = document.vicidial_form.alt_phone.value;
@@ -2876,7 +2986,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 			}
 		if (xmlhttp) 
 			{ 
-			manDiaLonly_query = "server_ip=" + server_ip + "&session_name=" + session_name + "&ACTION=manDiaLonly&conf_exten=" + session_id + "&user=" + user + "&pass=" + pass + "&lead_id=" + document.vicidial_form.lead_id.value + "&phone_number=" + manDiaLonly_num + "&phone_code=" + document.vicidial_form.phone_code.value + "&campaign=" + campaign + "&ext_context=" + ext_context + "&dial_timeout=" + dial_timeout + "&dial_prefix=" + dial_prefix + "&campaign_cid=" + campaign_cid;
+			manDiaLonly_query = "server_ip=" + server_ip + "&session_name=" + session_name + "&ACTION=manDiaLonly&conf_exten=" + session_id + "&user=" + user + "&pass=" + pass + "&lead_id=" + document.vicidial_form.lead_id.value + "&phone_number=" + manDiaLonly_num + "&phone_code=" + document.vicidial_form.phone_code.value + "&campaign=" + campaign + "&ext_context=" + ext_context + "&dial_timeout=" + dial_timeout + "&dial_prefix=" + dial_prefix + "&campaign_cid=" + campaign_cid + "&omit_phone_code=" + omit_phone_code;
 			xmlhttp.open('POST', 'vdc_db_query.php'); 
 			xmlhttp.setRequestHeader('Content-Type','application/x-www-form-urlencoded; charset=UTF-8');
 			xmlhttp.send(manDiaLonly_query); 
@@ -2903,7 +3013,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_es.gif\" border=0 alt=\"Colgar al Cliente\"></a>";
 
-						if (campaign_recording == 'ALLCALLS')
+						if ( (campaign_recording == 'ALLCALLS') || (campaign_recording == 'ALLFORCE') )
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -2999,11 +3109,75 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 		}
 
 
+
+// ################################################################################
+// Check to see if there is a call being sent from the auto-dialer to agent conf
+	function ReChecKCustoMerChaN()
+		{
+		var xmlhttp=false;
+		/*@cc_on @*/
+		/*@if (@_jscript_version >= 5)
+		// JScript gives us Conditional compilation, we can cope with old IE versions.
+		// and security blocked creation of the objects.
+		 try {
+		  xmlhttp = new ActiveXObject("Msxml2.XMLHTTP");
+		 } catch (e) {
+		  try {
+		   xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
+		  } catch (E) {
+		   xmlhttp = false;
+		  }
+		 }
+		@end @*/
+		if (!xmlhttp && typeof XMLHttpRequest!='undefined')
+			{
+			xmlhttp = new XMLHttpRequest();
+			}
+		if (xmlhttp) 
+			{ 
+			recheckVDAI_query = "server_ip=" + server_ip + "&session_name=" + session_name + "&user=" + user + "&pass=" + pass + "&campaign=" + campaign + "&ACTION=VDADREcheckINCOMING" + "&agent_log_id=" + agent_log_id + "&lead_id=" + document.vicidial_form.lead_id.value;
+			xmlhttp.open('POST', 'vdc_db_query.php'); 
+			xmlhttp.setRequestHeader('Content-Type','application/x-www-form-urlencoded; charset=UTF-8');
+			xmlhttp.send(recheckVDAI_query); 
+			xmlhttp.onreadystatechange = function() 
+				{ 
+				if (xmlhttp.readyState == 4 && xmlhttp.status == 200) 
+					{
+					var recheck_incoming = null;
+					recheck_incoming = xmlhttp.responseText;
+				//	alert(xmlhttp.responseText);
+					var recheck_VDIC_array=recheck_incoming.split("\n");
+					if (recheck_VDIC_array[0] == '1')
+						{
+						var reVDIC_data_VDAC=recheck_VDIC_array[1].split("|");
+						if (reVDIC_data_VDAC[3] == lastcustchannel)
+							{
+						// do nothing
+							}
+						else
+							{
+				//	alert("Canal has changed from:\n" + lastcustchannel + '|' + lastcustserverip + "\nto:\n" + reVDIC_data_VDAC[3] + '|' + reVDIC_data_VDAC[4]);
+							document.vicidial_form.callchannel.value	= reVDIC_data_VDAC[3];
+							lastcustchannel = reVDIC_data_VDAC[3];
+							document.vicidial_form.callserverip.value	= reVDIC_data_VDAC[4];
+							lastcustserverip = reVDIC_data_VDAC[4];
+							custchannellive = 1;
+							}
+						}
+					}
+				}
+			delete xmlhttp;
+			}
+		}
+
+
+
 // ################################################################################
 // Check to see if there is a call being sent from the auto-dialer to agent conf
 	function check_for_auto_incoming()
 		{
 		all_record = 'NO';
+		all_record_count=0;
 		document.vicidial_form.lead_id.value = '';
 		var xmlhttp=false;
 		/*@cc_on @*/
@@ -3197,7 +3371,8 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						"&session_id=" + session_id + 
 						"&phone=" + document.vicidial_form.phone_number.value + 
 						"&parked_by=" + document.vicidial_form.lead_id.value +
-						"&dispo=" + LeaDDispO;
+						"&dispo=" + LeaDDispO + '' +
+						webform_session;
 						
 						var regWFspace = new RegExp(" ","ig");
 						web_form_vars = web_form_vars.replace(regWF, '');
@@ -3213,7 +3388,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("WebFormSpan").innerHTML = "<a href=\"" + VDIC_web_form_address + web_form_vars + "\" target=\"vdcwebform\" onMouseOver=\"WebFormRefresH();\"><IMG SRC=\"../agc/images/vdc_LB_webform_es.gif\" border=0 alt=\"Formulario Web\"></a>\n";
 
-						if (campaign_recording == 'ALLCALLS')
+						if ( (campaign_recording == 'ALLCALLS') || (campaign_recording == 'ALLFORCE') )
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (CalL_ScripT_id.length > 0) )
@@ -3303,7 +3478,8 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 		"&session_id=" + session_id + 
 		"&phone=" + document.vicidial_form.phone_number.value + 
 		"&parked_by=" + document.vicidial_form.lead_id.value +
-		"&dispo=" + LeaDDispO;
+		"&dispo=" + LeaDDispO + '' +
+		webform_session;
 		
 		var regWFspace = new RegExp(" ","ig");
 		web_form_vars = web_form_vars.replace(regWF, '');
@@ -4174,7 +4350,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 					}
 				if (xmlhttp) 
 					{ 
-					VDlogout_query = "server_ip=" + server_ip + "&session_name=" + session_name + "&ACTION=userLOGout&format=text&user=" + user + "&pass=" + pass + "&campaign=" + campaign + "&conf_exten=" + session_id + "&extension=" + extension + "&protocol=" + protocol;
+					VDlogout_query = "server_ip=" + server_ip + "&session_name=" + session_name + "&ACTION=userLOGout&format=text&user=" + user + "&pass=" + pass + "&campaign=" + campaign + "&conf_exten=" + session_id + "&extension=" + extension + "&protocol=" + protocol + "&no_delete_sessions=" + no_delete_sessions;
 					xmlhttp.open('POST', 'vdc_db_query.php'); 
 					xmlhttp.setRequestHeader('Content-Type','application/x-www-form-urlencoded; charset=UTF-8');
 					xmlhttp.send(VDlogout_query); 
@@ -4487,7 +4663,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 			document.vicidial_form.LeadLookuP.checked=true;
 
 			document.getElementById("sessionIDspan").innerHTML = session_id;
-			if (campaign_recording == 'NEVER')
+			if ( (campaign_recording == 'NEVER') || (campaign_recording == 'ALLFORCE') )
 				{
 				document.getElementById("RecorDControl").innerHTML = "<IMG SRC=\"../agc/images/vdc_LB_startrecording_OFF.gif\" border=0 alt=\"Comenzar La Grabación\">";
 				}
@@ -4548,6 +4724,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 				}
 			if (logout_stop_timeouts==1)	{WaitingForNextStep=1;}
 			if ( (custchannellive < -30) && (lastcustchannel.length > 3) ) {CustomerChanneLGone();}
+			if ( (custchannellive < -10) && (lastcustchannel.length > 3) ) {ReChecKCustoMerChaN();}
 			if ( (nochannelinsession > 16) && (check_n > 15) ) {NoneInSession();}
 			if (wrapup_segundos > 0)	
 				{
@@ -4632,8 +4809,14 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 					}
 				if (all_record == 'YES')
 					{
-					conf_send_recording('MonitorConf',session_id ,'');
+					if (all_record_count < allcalls_delay)
-					all_record = 'NO';
+						{all_record_count++;}
+					else
+						{
+						conf_send_recording('MonitorConf',session_id ,'');
+						all_record = 'NO';
+						all_record_count=0;
+						}
 					}
 
 
@@ -5073,7 +5256,7 @@ echo "</head>\n";
 	<td align=left><font class="body_text"><input type=text size=7 maxlength=10 name=MDDiaLCodE class="cust_form" value="1">&nbsp; (Éste es generalmente un 1 en los U.S.A. y el Canadá)</td>
 	</tr><tr>
 	<td align=right><font class="body_text"> Teléfono Number: </td>
-	<td align=left><font class="body_text"><input type=text size=12 maxlength=10 name=MDPhonENumbeR class="cust_form" value="">&nbsp; (máximo de 10 dígitos - dígitos solamente)</td>
+	<td align=left><font class="body_text"><input type=text size=14 maxlength=12 name=MDPhonENumbeR class="cust_form" value="">&nbsp; (12 digits max - digits only)</td>
 	</tr><tr>
 	<td align=right><font class="body_text"> Plomos Existentes De la Búsqueda: </td>
 	<td align=left><font class="body_text"><input type=checkbox name=LeadLookuP size=1 value="0">&nbsp; (Esta opción si está comprobada procurará encontrar el número de teléfono en el sistema antes de insertarlo como nuevo plomo)</td>
@@ -5336,7 +5519,7 @@ GRABACIÓN ID: <font class="body_small"><span id="RecorDID"></span></font><BR>
 <span id="SpacerSpanC"><IMG SRC="../agc/images/blank.gif" width=145 height=16 border=0></span><BR>
 <span STYLE="background-color: #FFCCFF" id="HangupControl"><IMG SRC="../agc/images/vdc_LB_hangupcustomer_OFF_es.gif" border=0 alt="Colgar al Cliente"></span><BR>
 <span id="SpacerSpanD"><IMG SRC="../agc/images/blank.gif" width=145 height=16 border=0></span><BR>
-<span STYLE="background-color: #CCCCCC" id="SendDTMF"><a href="#" onclick="SendConfDTMF('<?=$session_id ?>');return false;"><IMG SRC="../agc/images/vdc_LB_senddtmf_es.gif" border=0 alt="Enviar DTMF"></a>  <input type=text size=5 name=conf_dtmf class="cust_form" value=""></span><BR>
+<span STYLE="background-color: #CCCCCC" id="SendDTMF"><a href="#" onclick="SendConfDTMF('<?=$session_id ?>');return false;"><IMG SRC="../agc/images/vdc_LB_senddtmf_es.gif" border=0 alt="Enviar DTMF"></a>  <input type=text size=5 name=conf_dtmf class="cust_form" value="" maxlength=50></span><BR>
 </center>
 </font>
 </td>
@@ -5372,7 +5555,7 @@ GRABACIÓN ID: <font class="body_small"><span id="RecorDID"></span></font><BR>
 <td align=left><font class="body_text"><input type=text size=20 name=province maxlength=50 class="cust_form" value="">&nbsp; Vendedor ID: <input type=text size=15 name=vendor_lead_code maxlength=20 class="cust_form" value=""></td>
 </tr><tr>
 <td align=right><font class="body_text"> Teléfono: </td>
-<td align=left><font class="body_text"><input type=text size=11 name=phone_number maxlength=10 class="cust_form" value="">&nbsp; Código Del Dial: <input type=text size=4 name=phone_code maxlength=10 class="cust_form" value="">&nbsp; Teléfono Alt: <input type=text size=11 name=alt_phone maxlength=10 class="cust_form" value=""></td>
+<td align=left><font class="body_text"><input type=text size=11 name=phone_number maxlength=12 class="cust_form" value="">&nbsp; Código Del Dial: <input type=text size=4 name=phone_code maxlength=10 class="cust_form" value="">&nbsp; Teléfono Alt: <input type=text size=11 name=alt_phone maxlength=12 class="cust_form" value=""></td>
 </tr><tr>
 <td align=right><font class="body_text"> Demostración: </td>
 <td align=left><font class="body_text"><input type=text size=20 name=security_phrase maxlength=100 class="cust_form" value="">&nbsp; Email: <input type=text size=25 name=email maxlength=70 class="cust_form" value=""></td>

agc_2-X/trunk/LANG_www/agc_es/voicemail_check.php

@@ -21,6 +21,7 @@
 # 50503-1241 - added session_name checking for extra security
 # 50711-1201 - removed HTTP authentication in favor of user/pass vars
 # 60421-1147 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1204 - Added variable filters to close security holes for login form
 #
 
 require("dbconnect.php");
@@ -39,11 +40,14 @@ if (isset($_GET["format"]))					{$format=$_GET["format"];}
 if (isset($_GET["vmail_box"]))				{$vmail_box=$_GET["vmail_box"];}
 	elseif (isset($_POST["vmail_box"]))		{$vmail_box=$_POST["vmail_box"];}
 
+$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+
 # default optional vars if not set
 if (!isset($format))   {$format="text";}
 
-$version = '0.0.4';
+$version = '0.0.5';
-$build = '60421-1147';
+$build = '60619-1204';
 $StarTtime = date("U");
 $NOW_DATE = date("Y-m-d");
 $NOW_TIME = date("Y-m-d H:i:s");