ViciDial/ViciDialSVN
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixes for security issues in several PHP scripts

Browse Source 
git-svn-id: svn://192.168.202.10@3504 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2021-08-25 13:37:52 +00:00
parent 0d67e9cb0f
commit 736e238a3d
18 changed files with 217 additions and 58 deletions
Download Patch File Download Diff File Expand all files Collapse all files
agc_2-X/trunk/www/agc/vdc_form_display.php
+4 -3
View File
@@ -53,10 +53,11 @@
# 210404-1522 - Added only_field option for refresh of already-loaded custom form SOURCESELECT element
# 210506-1825 - Fix for SELECTSOURCE reloading issue
# 210616-2037 - Added optional CORS support, see options.php for details
# 210825-0902 - Fix for XSS security issue
#
$version = '2.14-43';
$build = '210616-2037';
$version = '2.14-44';
$build = '210825-0902';
$php_script = 'vdc_form_display.php';
require_once("dbconnect_mysqli.php");
@@ -323,7 +324,7 @@ $lead_id = preg_replace('/[^0-9]/', '', $lead_id);
$list_id = preg_replace('/[^0-9]/', '', $list_id);
$new_list_id = preg_replace('/[^0-9]/', '', $new_list_id);
$agent_log_id = preg_replace('/[^0-9]/', '', $agent_log_id);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$server_ip = preg_replace('/[^-\.\:\_0-9a-zA-Z]/','',$server_ip);
$session_id = preg_replace('/[^0-9]/','',$session_id);
$call_id = preg_replace('/[^-_\.0-9a-zA-Z]/','',$call_id);
$button_action = preg_replace('/[^-_0-9a-zA-Z]/','',$button_action);