From 90d9e333a22a95933b46c7f00fb6386bc7fdd456 Mon Sep 17 00:00:00 2001 From: mattf Date: Thu, 24 Aug 2006 14:32:46 +0000 Subject: [PATCH] updated Spanish agc_es git-svn-id: svn://192.168.202.10@209 3d104415-ff17-0410-8863-d5cf3c621b8a --- .../LANG_agc/agc_es/active_list_refresh.php | 23 +++++++++++++++++-- .../LANG_agc/agc_es/call_log_display.php | 8 +++++-- .../LANG_agc/agc_es/conf_exten_check.php | 8 +++++-- .../trunk/LANG_agc/agc_es/inbound_popup.php | 7 ++++-- .../LANG_agc/agc_es/live_exten_check.php | 8 +++++-- .../trunk/LANG_agc/agc_es/manager_send.php | 9 ++++++-- .../LANG_agc/agc_es/park_calls_display.php | 8 +++++-- agc_1-X/trunk/LANG_agc/agc_es/vicidial.php | 11 +++++++-- .../trunk/LANG_agc/agc_es/voicemail_check.php | 8 +++++-- 9 files changed, 72 insertions(+), 18 deletions(-) diff --git a/agc_1-X/trunk/LANG_agc/agc_es/active_list_refresh.php b/agc_1-X/trunk/LANG_agc/agc_es/active_list_refresh.php index 6813fdd1..fb94a573 100644 --- a/agc_1-X/trunk/LANG_agc/agc_es/active_list_refresh.php +++ b/agc_1-X/trunk/LANG_agc/agc_es/active_list_refresh.php @@ -37,6 +37,7 @@ # 50610-1155 - Added NULL check on MySQL results to reduced errors # 50711-1209 - removed HTTP authentication in favor of user/pass vars # 60421-1155 - check GET/POST vars lines with isset to not trigger PHP NOTICES +# 60619-1118 - Added variable filters to close security holes for login form # require("dbconnect.php"); @@ -79,6 +80,24 @@ if (isset($_GET["textareawidth"])) {$textareawidth=$_GET["textareawidth"];} if (isset($_GET["field_name"])) {$field_name=$_GET["field_name"];} elseif (isset($_POST["field_name"])) {$field_name=$_POST["field_name"];} +### security strip all non-alphanumeric characters out of the variables ### + $user=ereg_replace("[^0-9a-zA-Z]","",$user); + $pass=ereg_replace("[^0-9a-zA-Z]","",$pass); + $ADD=ereg_replace("[^0-9]","",$ADD); + $order=ereg_replace("[^0-9a-zA-Z]","",$order); + $format=ereg_replace("[^0-9a-zA-Z]","",$format); + $bgcolor=ereg_replace("[^\#0-9a-zA-Z]","",$bgcolor); + $txtcolor=ereg_replace("[^\#0-9a-zA-Z]","",$txtcolor); + $txtsize=ereg_replace("[^0-9a-zA-Z]","",$txtsize); + $selectsize=ereg_replace("[^0-9a-zA-Z]","",$selectsize); + $selectfontsize=ereg_replace("[^0-9a-zA-Z]","",$selectfontsize); + $selectedext=ereg_replace("[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]","",$selectedext); + $selectedtrunk=ereg_replace("[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]","",$selectedtrunk); + $selectedlocal=ereg_replace("[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]","",$selectedlocal); + $textareaheight=ereg_replace("[^0-9a-zA-Z]","",$textareaheight); + $textareawidth=ereg_replace("[^0-9a-zA-Z]","",$textareawidth); + $field_name=ereg_replace("[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]","",$field_name); + # default optional vars if not set if (!isset($ADD)) {$ADD="1";} if (!isset($order)) {$order='desc';} @@ -91,8 +110,8 @@ if (!isset($selectfontsize)) {$selectfontsize='10';} if (!isset($textareaheight)) {$textareaheight='10';} if (!isset($textareawidth)) {$textareawidth='20';} -$version = '0.0.7'; -$build = '60421-1155'; +$version = '0.0.8'; +$build = '60619-1118'; $StarTtime = date("U"); $NOW_DATE = date("Y-m-d"); $NOW_TIME = date("Y-m-d H:i:s"); diff --git a/agc_1-X/trunk/LANG_agc/agc_es/call_log_display.php b/agc_1-X/trunk/LANG_agc/agc_es/call_log_display.php index f6c36dff..cc48a77b 100644 --- a/agc_1-X/trunk/LANG_agc/agc_es/call_log_display.php +++ b/agc_1-X/trunk/LANG_agc/agc_es/call_log_display.php @@ -27,6 +27,7 @@ # 50711-1202 - removed HTTP authentication in favor of user/pass vars # 60323-1550 - added option for showing different number dialed in log # 60421-1401 - check GET/POST vars lines with isset to not trigger PHP NOTICES +# 60619-1202 - Added variable filters to close security holes for login form # require("dbconnect.php"); @@ -47,6 +48,9 @@ if (isset($_GET["exten"])) {$exten=$_GET["exten"];} if (isset($_GET["protocol"])) {$protocol=$_GET["protocol"];} elseif (isset($_POST["protocol"])) {$protocol=$_POST["protocol"];} +$user=ereg_replace("[^0-9a-zA-Z]","",$user); +$pass=ereg_replace("[^0-9a-zA-Z]","",$pass); + # default optional vars if not set if (!isset($format)) {$format="text";} if (!isset($in_limit)) {$in_limit="100";} @@ -54,8 +58,8 @@ if (!isset($out_limit)) {$out_limit="100";} $number_dialed = 'number_dialed'; #$number_dialed = 'extension'; -$version = '0.0.7'; -$build = '60421-1401'; +$version = '0.0.8'; +$build = '60619-1202'; $StarTtime = date("U"); $NOW_DATE = date("Y-m-d"); $NOW_TIME = date("Y-m-d H:i:s"); diff --git a/agc_1-X/trunk/LANG_agc/agc_es/conf_exten_check.php b/agc_1-X/trunk/LANG_agc/agc_es/conf_exten_check.php index 08a640e3..243101df 100644 --- a/agc_1-X/trunk/LANG_agc/agc_es/conf_exten_check.php +++ b/agc_1-X/trunk/LANG_agc/agc_es/conf_exten_check.php @@ -31,6 +31,7 @@ # 51121-1353 - Altered echo statements for several small PHP speed optimizations # 60410-1424 - Added ability to grab calls-being-placed and agent status # 60421-1405 - check GET/POST vars lines with isset to not trigger PHP NOTICES +# 60619-1201 - Added variable filters to close security holes for login form # require("dbconnect.php"); @@ -59,13 +60,16 @@ if (isset($_GET["auto_dial_level"])) {$auto_dial_level=$_GET["auto_dial_level" if (isset($_GET["campagentstdisp"])) {$campagentstdisp=$_GET["campagentstdisp"];} elseif (isset($_POST["campagentstdisp"])) {$campagentstdisp=$_POST["campagentstdisp"];} +$user=ereg_replace("[^0-9a-zA-Z]","",$user); +$pass=ereg_replace("[^0-9a-zA-Z]","",$pass); + # default optional vars if not set if (!isset($format)) {$format="text";} if (!isset($ACTION)) {$ACTION="refresh";} if (!isset($client)) {$client="agc";} -$version = '0.0.8'; -$build = '60421-1405'; +$version = '0.0.9'; +$build = '60619-1201'; $StarTtime = date("U"); $NOW_DATE = date("Y-m-d"); $NOW_TIME = date("Y-m-d H:i:s"); diff --git a/agc_1-X/trunk/LANG_agc/agc_es/inbound_popup.php b/agc_1-X/trunk/LANG_agc/agc_es/inbound_popup.php index fe5e79b5..58462f0d 100644 --- a/agc_1-X/trunk/LANG_agc/agc_es/inbound_popup.php +++ b/agc_1-X/trunk/LANG_agc/agc_es/inbound_popup.php @@ -29,6 +29,7 @@ # 50503-1244 - added session_name checking for extra security # 50711-1203 - removed HTTP authentication in favor of user/pass vars # 60421-1043 - check GET/POST vars lines with isset to not trigger PHP NOTICES +# 60619-1205 - Added variable filters to close security holes for login form # require("dbconnect.php"); @@ -61,12 +62,14 @@ if (isset($_GET["local_web_callerID_URL_enc"])) {$local_web_callerID_URL_enc=$ if (isset($_GET["local_web_callerID_URL_enc"])) {$local_web_callerID_URL = rawurldecode($local_web_callerID_URL_enc);} else {$local_web_callerID_URL = '';} +$user=ereg_replace("[^0-9a-zA-Z]","",$user); +$pass=ereg_replace("[^0-9a-zA-Z]","",$pass); # default optional vars if not set if (!isset($format)) {$format="text";} -$version = '0.0.5'; -$build = '60421-1043'; +$version = '0.0.6'; +$build = '60619-1205'; $StarTtime = date("U"); $NOW_DATE = date("Y-m-d"); $NOW_TIME = date("Y-m-d H:i:s"); diff --git a/agc_1-X/trunk/LANG_agc/agc_es/live_exten_check.php b/agc_1-X/trunk/LANG_agc/agc_es/live_exten_check.php index 912854ad..789b6c22 100644 --- a/agc_1-X/trunk/LANG_agc/agc_es/live_exten_check.php +++ b/agc_1-X/trunk/LANG_agc/agc_es/live_exten_check.php @@ -27,6 +27,7 @@ # 50711-1204 - removed HTTP authentication in favor of user/pass vars # 60103-1541 - added favorite extens status display # 60421-1359 - check GET/POST vars lines with isset to not trigger PHP NOTICES +# 60619-1203 - Added variable filters to close security holes for login form # require("dbconnect.php"); @@ -51,11 +52,14 @@ if (isset($_GET["favorites_count"])) {$favorites_count=$_GET["favorites_count if (isset($_GET["favorites_list"])) {$favorites_list=$_GET["favorites_list"];} elseif (isset($_POST["favorites_list"])) {$favorites_list=$_POST["favorites_list"];} +$user=ereg_replace("[^0-9a-zA-Z]","",$user); +$pass=ereg_replace("[^0-9a-zA-Z]","",$pass); + # default optional vars if not set if (!isset($format)) {$format="text";} -$version = '1.1.11'; -$build = '60421-1359'; +$version = '1.1.12'; +$build = '60619-1203'; $StarTtime = date("U"); $NOW_DATE = date("Y-m-d"); $NOW_TIME = date("Y-m-d H:i:s"); diff --git a/agc_1-X/trunk/LANG_agc/agc_es/manager_send.php b/agc_1-X/trunk/LANG_agc/agc_es/manager_send.php index 930f11d9..098d0d67 100644 --- a/agc_1-X/trunk/LANG_agc/agc_es/manager_send.php +++ b/agc_1-X/trunk/LANG_agc/agc_es/manager_send.php @@ -58,6 +58,7 @@ # 51129-1253 - Fixed Hangups of other agents channels in VICIDIAL AD # 60310-2022 - Fixed NEXTAVAILABLE bug in leave-3way-call redirect function # 60421-1413 - check GET/POST vars lines with isset to not trigger PHP NOTICES +# 60619-1158 - Added variable filters to close security holes for login form # require("dbconnect.php"); @@ -112,13 +113,17 @@ if (isset($_GET["call_server_ip"])) {$call_server_ip=$_GET["call_server_ip"]; if (isset($_GET["CalLCID"])) {$CalLCID=$_GET["CalLCID"];} elseif (isset($_POST["CalLCID"])) {$CalLCID=$_POST["CalLCID"];} +$user=ereg_replace("[^0-9a-zA-Z]","",$user); +$pass=ereg_replace("[^0-9a-zA-Z]","",$pass); +$secondS = ereg_replace("[^0-9]","",$secondS); + # default optional vars if not set if (!isset($ACTION)) {$ACTION="Originate";} if (!isset($format)) {$format="alert";} if (!isset($ext_priority)) {$ext_priority="1";} -$version = '0.0.23'; -$build = '60421-1413'; +$version = '0.0.24'; +$build = '60619-1158'; $StarTtime = date("U"); $NOW_DATE = date("Y-m-d"); $NOW_TIME = date("Y-m-d H:i:s"); diff --git a/agc_1-X/trunk/LANG_agc/agc_es/park_calls_display.php b/agc_1-X/trunk/LANG_agc/agc_es/park_calls_display.php index 0f8c81ab..20b4c114 100644 --- a/agc_1-X/trunk/LANG_agc/agc_es/park_calls_display.php +++ b/agc_1-X/trunk/LANG_agc/agc_es/park_calls_display.php @@ -21,6 +21,7 @@ # 50524-1515 - First build of script # 50711-1208 - removed HTTP authentication in favor of user/pass vars # 60421-1111 - check GET/POST vars lines with isset to not trigger PHP NOTICES +# 60619-1205 - Added variable filters to close security holes for login form # require("dbconnect.php"); @@ -41,12 +42,15 @@ if (isset($_GET["exten"])) {$exten=$_GET["exten"];} if (isset($_GET["protocol"])) {$protocol=$_GET["protocol"];} elseif (isset($_POST["protocol"])) {$protocol=$_POST["protocol"];} +$user=ereg_replace("[^0-9a-zA-Z]","",$user); +$pass=ereg_replace("[^0-9a-zA-Z]","",$pass); + # default optional vars if not set if (!isset($format)) {$format="text";} if (!isset($park_limit)) {$park_limit="1000";} -$version = '0.0.3'; -$build = '60421-1111'; +$version = '0.0.4'; +$build = '60619-1205'; $StarTtime = date("U"); $NOW_DATE = date("Y-m-d"); $NOW_TIME = date("Y-m-d H:i:s"); diff --git a/agc_1-X/trunk/LANG_agc/agc_es/vicidial.php b/agc_1-X/trunk/LANG_agc/agc_es/vicidial.php index 95ffa8a2..b4877c28 100644 --- a/agc_1-X/trunk/LANG_agc/agc_es/vicidial.php +++ b/agc_1-X/trunk/LANG_agc/agc_es/vicidial.php @@ -112,6 +112,7 @@ # 60609-1123 - Added add-number-to-DNC-list function and manual dial check DNC # 60619-1047 - Added variable filters to close security holes for login form # 60804-1710 - fixed scheduled CALLBK for other languages build +# 60816-1715 - Fixed customer time display bug and client DST setting # require("dbconnect.php"); @@ -157,8 +158,8 @@ if (isset($_GET["relogin"])) {$relogin=$_GET["relogin"];} $forever_stop=0; -$version = '1.1.86'; -$build = '60804-1710'; +$version = '1.1.87'; +$build = '60816-1715'; if ($force_logout) { @@ -166,6 +167,7 @@ if ($force_logout) exit; } +$isdst = date("I"); $StarTtimE = date("U"); $NOW_TIME = date("Y-m-d H:i:s"); $tsNOW_TIME = date("YmdHis"); @@ -186,6 +188,7 @@ $view_scripts = '1'; # set to 1 to show the SCRIPTS tab $dispo_check_all_pause = '0'; # set to 1 to allow for persistent pause after dispo $agentcallsstatus = '0'; # set to 1 to show agent status and call count $campagentstatctmax = '0'; # Number of segundos for campaign call and agent stats +$clientDST = '1'; # set to 1 to check for DST en server for agent time $TEST_all_statuses = '0'; # TEST variable allows all statuses in dispo screen @@ -740,6 +743,10 @@ else $DBX_pass=$row[58]; $DBX_port=$row[59]; + if ($clientDST) + { + $local_gmt = ($local_gmt + $isdst); + } if ($protocol == 'EXTERNAL') { $protocol = 'Local'; diff --git a/agc_1-X/trunk/LANG_agc/agc_es/voicemail_check.php b/agc_1-X/trunk/LANG_agc/agc_es/voicemail_check.php index 46db91bd..f153ee04 100644 --- a/agc_1-X/trunk/LANG_agc/agc_es/voicemail_check.php +++ b/agc_1-X/trunk/LANG_agc/agc_es/voicemail_check.php @@ -21,6 +21,7 @@ # 50503-1241 - added session_name checking for extra security # 50711-1201 - removed HTTP authentication in favor of user/pass vars # 60421-1147 - check GET/POST vars lines with isset to not trigger PHP NOTICES +# 60619-1204 - Added variable filters to close security holes for login form # require("dbconnect.php"); @@ -39,11 +40,14 @@ if (isset($_GET["format"])) {$format=$_GET["format"];} if (isset($_GET["vmail_box"])) {$vmail_box=$_GET["vmail_box"];} elseif (isset($_POST["vmail_box"])) {$vmail_box=$_POST["vmail_box"];} +$user=ereg_replace("[^0-9a-zA-Z]","",$user); +$pass=ereg_replace("[^0-9a-zA-Z]","",$pass); + # default optional vars if not set if (!isset($format)) {$format="text";} -$version = '0.0.4'; -$build = '60421-1147'; +$version = '0.0.5'; +$build = '60619-1204'; $StarTtime = date("U"); $NOW_DATE = date("Y-m-d"); $NOW_TIME = date("Y-m-d H:i:s");