fixed issues with other language translations and scheduled callbacks and ALLCALLS recordings

git-svn-id: svn://192.168.202.10@114 3d104415-ff17-0410-8863-d5cf3c621b8a

agc_1-X/trunk/LANG_agc/agc/astguiclient.php

@@ -53,7 +53,8 @@
 # 60104-1347 - Added basic layout for favorites editing frame
 # 60105-1124 - Finished Favorites frame and added DB submission
 # 60112-1622 - Several formatting changes
-# 60421-1043 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60421-1357 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1103 - Added variable filters to close security holes for login form
 # 
 
 require("dbconnect.php");
@@ -87,8 +88,16 @@ $user_abb = "$user$user$user$user";
 while ( (strlen($user_abb) > 4) and ($forever_stop < 200) )
 	{$user_abb = eregi_replace("^.","",$user_abb);   $forever_stop++;}
 
-$version = '1.1.11';
-$build = '60421-1043';
+$version = '1.1.12';
+$build = '60619-1103';
+
+### security strip all non-alphanumeric characters out of the variables ###
+	$DB=ereg_replace("[^0-9a-z]","",$DB);
+	$phone_login=ereg_replace("[^0-9a-zA-Z]","",$phone_login);
+	$phone_pass=ereg_replace("[^0-9a-zA-Z]","",$phone_pass);
+	$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+	$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+
 
 if ($force_logout)
 {
@@ -363,8 +372,8 @@ else
 		while ($favorites_count > $o) 
 			{
 			$stmt="SELECT fullname,protocol from phones where extension = '$favorites[$o]' and server_ip='$server_ip';";
-			$rsltx=mysql_query($stmt, $link);
-			$rowx=mysql_fetch_row($rsltx);
+			$rslt=mysql_query($stmt, $link);
+			$rowx=mysql_fetch_row($rslt);
 			$favorites_names[$o] =	$rowx[0];
 			$favorites_listX .= "$rowx[1]/$favorites[$o],";
 			$o++;
@@ -1516,7 +1525,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (out_calls > 0)
 						{
-						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">CALL DATE/TIME</td><td><font class=\"log_title\">NUMBER</td><td align=right><font class=\"log_title\">LENGTH (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
+						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> CALL DATE/TIME</td><td><font class=\"log_title\">NUMBER</td><td align=right><font class=\"log_title\">LENGTH (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < out_calls)
 							{
 							loop_ct++;
@@ -1544,7 +1553,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (in_calls > 0)
 						{
-						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">CALL DATE/TIME</td><td><font class=\"log_title\">IN-NUMBER</td><td COLSPAN=2><font class=\"log_title\">CALLERID</td><td align=right><font class=\"log_title\">LENGTH</td><td><font class=\"log_title\"> </td></tr>"
+						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> CALL DATE/TIME</td><td><font class=\"log_title\">IN-NUMBER</td><td COLSPAN=2><font class=\"log_title\">CALLERID</td><td align=right><font class=\"log_title\">LENGTH</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < in_calls)
 							{
 							loop_ct++;

agc_1-X/trunk/LANG_agc/agc/vdc_db_query.php

@@ -372,7 +372,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 		$affected_rows=1;
 		$CBleadIDset=1;
 
-		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where callback_id='$callback_id';";
+		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' and status NOT IN('INACTIVE','DEAD','ARCHIVE');";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		}
@@ -626,7 +626,7 @@ if ($ACTION == 'manDiaLonly')
 	if ( (strlen($conf_exten)<1) || (strlen($campaign)<1) || (strlen($ext_context)<1) || (strlen($phone_number)<1) || (strlen($lead_id)<1) )
 	{
 		$channel_live=0;
-		echo "CALL NOT PLACED\n";
+		echo " CALL NOT PLACED\n";
 		echo "Conf Exten $conf_exten or campaign $campaign or ext_context $ext_context is not valid\n";
 		exit;
 	}
@@ -1181,9 +1181,9 @@ if ($ACTION == 'VDADcheckINCOMING')
 		$rslt=mysql_query($stmt, $link);
 
 		### If CALLBK, change vicidial_callback record to INACTIVE
-		if ($dispo == 'CALLBK')
+		if (eregi("CALLBK|CBHOLD", $dispo))
 			{
-			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' order by callback_id desc LIMIT 1;";
+			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id';";
 				if ($format=='debug') {echo "\n<!-- $stmt -->";}
 			$rslt=mysql_query($stmt, $link);
 			}

agc_1-X/trunk/LANG_agc/agc/vicidial.php

@@ -111,6 +111,7 @@
 # 60608-1453 - Added CLOSER campaign allowable in-groups limitations
 # 60609-1123 - Added add-number-to-DNC-list function and manual dial check DNC
 # 60619-1047 - Added variable filters to close security holes for login form
+# 60804-1710 - fixed scheduled CALLBK for other languages build
 #
 
 require("dbconnect.php");
@@ -156,8 +157,8 @@ if (isset($_GET["relogin"]))					{$relogin=$_GET["relogin"];}
 
 $forever_stop=0;
 
-$version = '1.1.85';
-$build = '60619-1047';
+$version = '1.1.86';
+$build = '60804-1710';
 
 if ($force_logout)
 {
@@ -1319,23 +1320,23 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	var AgainCalLSecondS = '';
 	var AgaiNCalLCID = '';
 	var CB_count_check = 60;
-	var agentcallsstatus = '<? echo $agentcallsstatus ?>'
-	var campagentstatctmax = '<? echo $campagentstatctmax ?>'
-	var campagentstatct = '0'
+	var agentcallsstatus = '<? echo $agentcallsstatus ?>';
+	var campagentstatctmax = '<? echo $campagentstatctmax ?>';
+	var campagentstatct = '0';
 	var manual_dial_in_progress = 0;
 	var auto_dial_alt_dial = 0;
 	var reselect_preview_dial = 0;
 	var reselect_alt_dial = 0;
 	var alt_dial_active = 0;
 	var mdnLisT_id = '999';
-	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>'
-	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>'
-	var agentcall_manual = '<? echo $agentcall_manual ?>'
-	var manual_dial_preview = '<? echo $manual_dial_preview ?>'
-	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var wrapup_seconds = '<? echo $wrapup_seconds ?>'
-	var wrapup_message = '<? echo $wrapup_message ?>'
+	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>';
+	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>';
+	var agentcall_manual = '<? echo $agentcall_manual ?>';
+	var manual_dial_preview = '<? echo $manual_dial_preview ?>';
+	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var wrapup_seconds = '<? echo $wrapup_seconds ?>';
+	var wrapup_message = '<? echo $wrapup_message ?>';
 	var wrapup_counter = 0;
 	var wrapup_waiting = 0;
 	var use_internal_dnc = '<? echo $use_internal_dnc ?>'
@@ -2258,7 +2259,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						var CB_calls = all_CBs_array[0];
 						var loop_ct=0;
 						var conv_start=0;
-						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">CALLBACK DATE/TIME</td><td><font class=\"log_title\">NUMBER</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUS</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST CALL DATE/TIME</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
+						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> CALLBACK DATE/TIME</td><td><font class=\"log_title\">NUMBER</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUS</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST CALL DATE/TIME</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
 						while (loop_ct < CB_calls)
 							{
 							loop_ct++;
@@ -2889,7 +2890,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 					var MDOnextResponse_array=MDOnextResponse.split("\n");
 					MDnextCID = MDOnextResponse_array[0];
-					if (MDnextCID == "CALL NOT PLACED")
+					if (MDnextCID == " CALL NOT PLACED")
 						{
 						alert("call was not placed, there was an error:\n" + MDOnextResponse);
 						}
@@ -3715,7 +3716,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 		{
 		AgentDispoing = 1;
 		var VD_statuses_ct_half = parseInt(VD_statuses_ct / 2);
-		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B>CALL DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
+		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B> CALL DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
 		var loop_ct = 0;
 		while (loop_ct < VD_statuses_ct)
 			{

agc_1-X/trunk/LANG_agc/agc_br/astguiclient.php

@@ -53,7 +53,8 @@
 # 60104-1347 - Added basic layout for favorites editing frame
 # 60105-1124 - Finished Favorites frame and added DB submission
 # 60112-1622 - Several formatting changes
-# 60421-1043 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60421-1357 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1103 - Added variable filters to close security holes for login form
 # 
 
 require("dbconnect.php");
@@ -87,8 +88,16 @@ $user_abb = "$user$user$user$user";
 while ( (strlen($user_abb) > 4) and ($forever_stop < 200) )
 	{$user_abb = eregi_replace("^.","",$user_abb);   $forever_stop++;}
 
-$version = '1.1.11';
-$build = '60421-1043';
+$version = '1.1.12';
+$build = '60619-1103';
+
+### security strip all non-alphanumeric characters out of the variables ###
+	$DB=ereg_replace("[^0-9a-z]","",$DB);
+	$phone_login=ereg_replace("[^0-9a-zA-Z]","",$phone_login);
+	$phone_pass=ereg_replace("[^0-9a-zA-Z]","",$phone_pass);
+	$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+	$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+
 
 if ($force_logout)
 {
@@ -363,8 +372,8 @@ else
 		while ($favorites_count > $o) 
 			{
 			$stmt="SELECT fullname,protocol from phones where extension = '$favorites[$o]' and server_ip='$server_ip';";
-			$rsltx=mysql_query($stmt, $link);
-			$rowx=mysql_fetch_row($rsltx);
+			$rslt=mysql_query($stmt, $link);
+			$rowx=mysql_fetch_row($rslt);
 			$favorites_names[$o] =	$rowx[0];
 			$favorites_listX .= "$rowx[1]/$favorites[$o],";
 			$o++;
@@ -1516,7 +1525,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (out_calls > 0)
 						{
-						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">DATA/HORA DA CHAMADA</td><td><font class=\"log_title\">NUMERO</td><td align=right><font class=\"log_title\">COMPRIMENTO (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
+						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> DATA/HORA DA CHAMADA</td><td><font class=\"log_title\">NUMERO</td><td align=right><font class=\"log_title\">COMPRIMENTO (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < out_calls)
 							{
 							loop_ct++;
@@ -1544,7 +1553,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (in_calls > 0)
 						{
-						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">DATA/HORA DA CHAMADA</td><td><font class=\"log_title\">NUMERO ENTRANTE</td><td COLSPAN=2><font class=\"log_title\">CHAMADAERID</td><td align=right><font class=\"log_title\">COMPRIMENTO</td><td><font class=\"log_title\"> </td></tr>"
+						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> DATA/HORA DA CHAMADA</td><td><font class=\"log_title\">NUMERO ENTRANTE</td><td COLSPAN=2><font class=\"log_title\">CALLERID</td><td align=right><font class=\"log_title\">COMPRIMENTO</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < in_calls)
 							{
 							loop_ct++;

agc_1-X/trunk/LANG_agc/agc_br/vdc_db_query.php

@@ -372,7 +372,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 		$affected_rows=1;
 		$CBleadIDset=1;
 
-		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where callback_id='$callback_id';";
+		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' and status NOT IN('INACTIVE','DEAD','ARCHIVE');";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		}
@@ -493,7 +493,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 
 			$called_count++;
 
-			### flag the lead as called and change it's status to INCHAMADA
+			### flag the lead as called and change it's status to INCALL
 			$stmt = "UPDATE vicidial_list set status='INCALL', called_since_last_reset='Y', called_count='$called_count',user='$user' where lead_id='$lead_id';";
 			if ($DB) {echo "$stmt\n";}
 			$rslt=mysql_query($stmt, $link);
@@ -603,7 +603,7 @@ if ($ACTION == 'manDiaLskip')
 	else
 	{
 		$called_count = ($called_count - 1);
-		### flag the lead as called and change it's status to INCHAMADA
+		### flag the lead as called and change it's status to INCALL
 		$stmt = "UPDATE vicidial_list set status='$stage', called_count='$called_count',user='$user' where lead_id='$lead_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
@@ -626,7 +626,7 @@ if ($ACTION == 'manDiaLonly')
 	if ( (strlen($conf_exten)<1) || (strlen($campaign)<1) || (strlen($ext_context)<1) || (strlen($phone_number)<1) || (strlen($lead_id)<1) )
 	{
 		$channel_live=0;
-		echo "CHAMADA NOT PLACED\n";
+		echo " CHAMADA NOT PLACED\n";
 		echo "Conf Exten $conf_exten or campaign $campaign or ext_context $ext_context não é válido\n";
 		exit;
 	}
@@ -758,7 +758,7 @@ if ($stage == "start")
 
 	#	if ($affected_rows > 0)
 	#		{
-	#		echo "CHAMADA_LOG Inserido: $uniqueid|$channel|$NOW_TIME";
+	#		echo "CALL_LOG Inserido: $uniqueid|$channel|$NOW_TIME";
 	#		}
 	#	else
 	#		{
@@ -979,7 +979,7 @@ if ($ACTION == 'VDADcheckINCOMING')
 			if (strlen($call_server_ip)<7) {$call_server_ip = $server_ip;}
 		echo "1\n" . $lead_id . '|' . $uniqueid . '|' . $callerid . '|' . $channel . '|' . $call_server_ip . "|\n";
 
-		### update the agent status to INCHAMADA in vicidial_live_agents
+		### update the agent status to INCALL in vicidial_live_agents
 		$stmt = "UPDATE vicidial_live_agents set status='INCALL',last_call_time='$NOW_TIME' where user='$user' and server_ip='$server_ip';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
@@ -1021,19 +1021,19 @@ if ($ACTION == 'VDADcheckINCOMING')
 			$called_count	= trim("$row[30]");
 			}
 
-		### update the lead status to INCHAMADA
+		### update the lead status to INCALL
 		$stmt = "UPDATE vicidial_list set status='INCALL', user='$user' where lead_id='$lead_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
-		### update the log status to INCHAMADA
+		### update the log status to INCALL
 		$stmt = "UPDATE vicidial_log set user='$user', comments='AUTO', list_id='$list_id', status='INCALL' where lead_id='$lead_id' and uniqueid='$uniqueid';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
 		if (eregi("CLOSER",$campaign))
 			{
-			### update the vicidial_closer_log user to INCHAMADA
+			### update the vicidial_closer_log user to INCALL
 			$stmt = "UPDATE vicidial_closer_log set user='$user', comments='AUTO', list_id='$list_id', status='INCALL' where lead_id='$lead_id' order by closecallid desc limit 1;";
 			if ($DB) {echo "$stmt\n";}
 			$rslt=mysql_query($stmt, $link);
@@ -1181,9 +1181,9 @@ if ($ACTION == 'VDADcheckINCOMING')
 		$rslt=mysql_query($stmt, $link);
 
 		### If CHAMADABK, change vicidial_callback record to INACTIVE
-		if ($dispo == 'CHAMADABK')
+		if (eregi("CALLBK|CBHVELHO", $dispo))
 			{
-			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' order by callback_id desc LIMIT 1;";
+			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id';";
 				if ($format=='debug') {echo "\n<!-- $stmt -->";}
 			$rslt=mysql_query($stmt, $link);
 			}

agc_1-X/trunk/LANG_agc/agc_br/vicidial.php

@@ -111,6 +111,7 @@
 # 60608-1453 - Added CLOSER campaign allowable in-groups limitations
 # 60609-1123 - Added add-number-to-DNC-list function and manual dial check DNC
 # 60619-1047 - Added variable filters to close security holes for login form
+# 60804-1710 - fixed scheduled CALLBK for other languages build
 #
 
 require("dbconnect.php");
@@ -156,8 +157,8 @@ if (isset($_GET["relogin"]))					{$relogin=$_GET["relogin"];}
 
 $forever_stop=0;
 
-$version = '1.1.85';
-$build = '60619-1047';
+$version = '1.1.86';
+$build = '60804-1710';
 
 if ($force_logout)
 {
@@ -177,7 +178,7 @@ $random = (rand(1000000, 9999999) + 10000000);
 
 $conf_silent_prefix		= '7';	# vicidial_conferences prefix to enter silently
 $HKuser_level			= '5';	# minimum vicidial user_level for HotKeys
-#$campaign_login_list	= '1';	# show drop-down list of campaigns at login	
+$campaign_login_list	= '1';	# show drop-down list of campaigns at login	
 $manual_dial_preview	= '1';	# allow preview lead option when manual dial
 $multi_line_comments	= '1';	# set to 1 to allow multi-line comment box
 $user_login_first		= '0';	# set to 1 to have the vicidial_user login before the phone login
@@ -1319,23 +1320,23 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	var AgainCalLSecondS = '';
 	var AgaiNCalLCID = '';
 	var CB_count_check = 60;
-	var agentcallsstatus = '<? echo $agentcallsstatus ?>'
-	var campagentstatctmax = '<? echo $campagentstatctmax ?>'
-	var campagentstatct = '0'
+	var agentcallsstatus = '<? echo $agentcallsstatus ?>';
+	var campagentstatctmax = '<? echo $campagentstatctmax ?>';
+	var campagentstatct = '0';
 	var manual_dial_in_progress = 0;
 	var auto_dial_alt_dial = 0;
 	var reselect_preview_dial = 0;
 	var reselect_alt_dial = 0;
 	var alt_dial_active = 0;
 	var mdnLisT_id = '999';
-	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>'
-	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>'
-	var agentcall_manual = '<? echo $agentcall_manual ?>'
-	var manual_dial_preview = '<? echo $manual_dial_preview ?>'
-	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var wrapup_segundos = '<? echo $wrapup_segundos ?>'
-	var wrapup_message = '<? echo $wrapup_message ?>'
+	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>';
+	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>';
+	var agentcall_manual = '<? echo $agentcall_manual ?>';
+	var manual_dial_preview = '<? echo $manual_dial_preview ?>';
+	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var wrapup_segundos = '<? echo $wrapup_segundos ?>';
+	var wrapup_message = '<? echo $wrapup_message ?>';
 	var wrapup_counter = 0;
 	var wrapup_waiting = 0;
 	var use_internal_dnc = '<? echo $use_internal_dnc ?>'
@@ -2258,7 +2259,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						var CB_calls = all_CBs_array[0];
 						var loop_ct=0;
 						var conv_start=0;
-						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">CHAMADABACK DATE/TIME</td><td><font class=\"log_title\">NUMERO</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUS</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST DATA/HORA DA CHAMADA</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
+						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> CHAMADABACK DATE/TIME</td><td><font class=\"log_title\">NUMERO</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUS</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST DATA/HORA DA CHAMADA</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
 						while (loop_ct < CB_calls)
 							{
 							loop_ct++;
@@ -2675,7 +2676,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						VDIC_web_form_address = VICIDiaL_web_form_address;
 
-						if (LeaDPreVDispO == 'CHAMADABK')
+						if (LeaDPreVDispO == 'CALLBK')
 							{
 							document.getElementById("CusTInfOSpaN").innerHTML = " <B> PREVIOUS CHAMADABACK </B>";
 							document.getElementById("CusTInfOSpaN").style.background = CusTCB_bgcolor;
@@ -2697,7 +2698,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 							document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_ptbr.gif\" border=0 alt=\"Desligar Cliente\"></a>";
 
-							if (campaign_recording == 'ALLCHAMADAS')
+							if (campaign_recording == 'ALLCALLS')
 								{all_record = 'YES';}
 
 							if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -2889,7 +2890,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 					var MDOnextResponse_array=MDOnextResponse.split("\n");
 					MDnextCID = MDOnextResponse_array[0];
-					if (MDnextCID == "CHAMADA NOT PLACED")
+					if (MDnextCID == " CHAMADA NOT PLACED")
 						{
 						alert("A ligação não foi efetuada. Houve um erro.:\n" + MDOnextResponse);
 						}
@@ -2902,7 +2903,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_ptbr.gif\" border=0 alt=\"Desligar Cliente\"></a>";
 
-						if (campaign_recording == 'ALLCHAMADAS')
+						if (campaign_recording == 'ALLCALLS')
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -3116,7 +3117,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						lead_dial_number = document.vicidial_form.phone_number.value;
 						document.getElementById("MainStatuSSpan").innerHTML = " Entrante: " + document.vicidial_form.phone_number.value + " UID: " + CIDcheck + " &nbsp; " + VDIC_fronter; 
 
-						if (LeaDPreVDispO == 'CHAMADABK')
+						if (LeaDPreVDispO == 'CALLBK')
 							{
 							document.getElementById("CusTInfOSpaN").innerHTML = " <B> PREVIOUS CHAMADABACK </B>";
 							document.getElementById("CusTInfOSpaN").style.background = CusTCB_bgcolor;
@@ -3212,7 +3213,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("WebFormSpan").innerHTML = "<a href=\"" + VDIC_web_form_address + web_form_vars + "\" target=\"vdcwebform\" onMouseOver=\"WebFormRefresH();\"><IMG SRC=\"../agc/images/vdc_LB_webform_ptbr.gif\" border=0 alt=\"Web Form\"></a>\n";
 
-						if (campaign_recording == 'ALLCHAMADAS')
+						if (campaign_recording == 'ALLCALLS')
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (CalL_ScripT_id.length > 0) )
@@ -3715,7 +3716,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 		{
 		AgentDispoing = 1;
 		var VD_statuses_ct_half = parseInt(VD_statuses_ct / 2);
-		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B>CHAMADA DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
+		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B> CHAMADA DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
 		var loop_ct = 0;
 		while (loop_ct < VD_statuses_ct)
 			{
@@ -3776,7 +3777,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 			document.getElementById("CusTInfOSpaN").innerHTML = "";
 			document.getElementById("CusTInfOSpaN").style.background = panel_bgcolor;
 
-			if ( (DispoChoice == 'CHAMADABK') && (scheduled_callbacks > 0) ) {showDiv('CallBackSelectBox');}
+			if ( (DispoChoice == 'CALLBK') && (scheduled_callbacks > 0) ) {showDiv('CallBackSelectBox');}
 			else
 				{
 				var xmlhttp=false;

agc_1-X/trunk/LANG_agc/agc_de/astguiclient.php

@@ -53,7 +53,8 @@
 # 60104-1347 - Added basic layout for favorites editing frame
 # 60105-1124 - Finished Favorites frame and added DB submission
 # 60112-1622 - Several formatting changes
-# 60421-1043 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60421-1357 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1103 - Added variable filters to close security holes for login form
 # 
 
 require("dbconnect.php");
@@ -87,8 +88,16 @@ $user_abb = "$user$user$user$user";
 while ( (strlen($user_abb) > 4) and ($forever_stop < 200) )
 	{$user_abb = eregi_replace("^.","",$user_abb);   $forever_stop++;}
 
-$version = '1.1.11';
-$build = '60421-1043';
+$version = '1.1.12';
+$build = '60619-1103';
+
+### security strip all non-alphanumeric characters out of the variables ###
+	$DB=ereg_replace("[^0-9a-z]","",$DB);
+	$phone_login=ereg_replace("[^0-9a-zA-Z]","",$phone_login);
+	$phone_pass=ereg_replace("[^0-9a-zA-Z]","",$phone_pass);
+	$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+	$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+
 
 if ($force_logout)
 {
@@ -363,8 +372,8 @@ else
 		while ($favorites_count > $o) 
 			{
 			$stmt="SELECT fullname,protocol from phones where extension = '$favorites[$o]' and server_ip='$server_ip';";
-			$rsltx=mysql_query($stmt, $link);
-			$rowx=mysql_fetch_row($rsltx);
+			$rslt=mysql_query($stmt, $link);
+			$rowx=mysql_fetch_row($rslt);
 			$favorites_names[$o] =	$rowx[0];
 			$favorites_listX .= "$rowx[1]/$favorites[$o],";
 			$o++;
@@ -1516,7 +1525,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (out_calls > 0)
 						{
-						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">ANRUFDATE/TIME</td><td><font class=\"log_title\">ZAHL</td><td align=right><font class=\"log_title\">LÄNGE (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
+						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> ANRUFDATE/TIME</td><td><font class=\"log_title\">ZAHL</td><td align=right><font class=\"log_title\">LÄNGE (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < out_calls)
 							{
 							loop_ct++;
@@ -1544,7 +1553,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (in_calls > 0)
 						{
-						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">ANRUFDATE/TIME</td><td><font class=\"log_title\">IN-ZAHL</td><td COLSPAN=2><font class=\"log_title\">ANRUFERID</td><td align=right><font class=\"log_title\">LÄNGE</td><td><font class=\"log_title\"> </td></tr>"
+						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> ANRUFDATE/TIME</td><td><font class=\"log_title\">IN-ZAHL</td><td COLSPAN=2><font class=\"log_title\">CALLERID</td><td align=right><font class=\"log_title\">LÄNGE</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < in_calls)
 							{
 							loop_ct++;

agc_1-X/trunk/LANG_agc/agc_de/vdc_db_query.php

@@ -372,7 +372,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 		$affected_rows=1;
 		$CBleadIDset=1;
 
-		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where callback_id='$callback_id';";
+		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' and status NOT IN('INACTIVE','DEAD','ARCHIVE');";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		}
@@ -493,7 +493,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 
 			$called_count++;
 
-			### flag the lead as called and change it's status to INANRUF
+			### flag the lead as called and change it's status to INCALL
 			$stmt = "UPDATE vicidial_list set status='INCALL', called_since_last_reset='Y', called_count='$called_count',user='$user' where lead_id='$lead_id';";
 			if ($DB) {echo "$stmt\n";}
 			$rslt=mysql_query($stmt, $link);
@@ -603,7 +603,7 @@ if ($ACTION == 'manDiaLskip')
 	else
 	{
 		$called_count = ($called_count - 1);
-		### flag the lead as called and change it's status to INANRUF
+		### flag the lead as called and change it's status to INCALL
 		$stmt = "UPDATE vicidial_list set status='$stage', called_count='$called_count',user='$user' where lead_id='$lead_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
@@ -626,7 +626,7 @@ if ($ACTION == 'manDiaLonly')
 	if ( (strlen($conf_exten)<1) || (strlen($campaign)<1) || (strlen($ext_context)<1) || (strlen($phone_number)<1) || (strlen($lead_id)<1) )
 	{
 		$channel_live=0;
-		echo "ANRUF NOT PLACED\n";
+		echo " ANRUF NOT PLACED\n";
 		echo "Conf Exten $conf_exten or campaign $campaign or ext_context $ext_context ist unzulässig\n";
 		exit;
 	}
@@ -758,7 +758,7 @@ if ($stage == "start")
 
 	#	if ($affected_rows > 0)
 	#		{
-	#		echo "ANRUF_LOG Eingesetzt: $uniqueid|$channel|$NOW_TIME";
+	#		echo "CALL_LOG Eingesetzt: $uniqueid|$channel|$NOW_TIME";
 	#		}
 	#	else
 	#		{
@@ -979,7 +979,7 @@ if ($ACTION == 'VDADcheckINCOMING')
 			if (strlen($call_server_ip)<7) {$call_server_ip = $server_ip;}
 		echo "1\n" . $lead_id . '|' . $uniqueid . '|' . $callerid . '|' . $channel . '|' . $call_server_ip . "|\n";
 
-		### update the agent status to INANRUF in vicidial_live_agents
+		### update the agent status to INCALL in vicidial_live_agents
 		$stmt = "UPDATE vicidial_live_agents set status='INCALL',last_call_time='$NOW_TIME' where user='$user' and server_ip='$server_ip';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
@@ -1021,19 +1021,19 @@ if ($ACTION == 'VDADcheckINCOMING')
 			$called_count	= trim("$row[30]");
 			}
 
-		### update the lead status to INANRUF
+		### update the lead status to INCALL
 		$stmt = "UPDATE vicidial_list set status='INCALL', user='$user' where lead_id='$lead_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
-		### update the log status to INANRUF
+		### update the log status to INCALL
 		$stmt = "UPDATE vicidial_log set user='$user', comments='AUTO', list_id='$list_id', status='INCALL' where lead_id='$lead_id' and uniqueid='$uniqueid';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
 		if (eregi("CLOSER",$campaign))
 			{
-			### update the vicidial_closer_log user to INANRUF
+			### update the vicidial_closer_log user to INCALL
 			$stmt = "UPDATE vicidial_closer_log set user='$user', comments='AUTO', list_id='$list_id', status='INCALL' where lead_id='$lead_id' order by closecallid desc limit 1;";
 			if ($DB) {echo "$stmt\n";}
 			$rslt=mysql_query($stmt, $link);
@@ -1181,9 +1181,9 @@ if ($ACTION == 'VDADcheckINCOMING')
 		$rslt=mysql_query($stmt, $link);
 
 		### If ANRUFBK, change vicidial_callback record to INACTIVE
-		if ($dispo == 'ANRUFBK')
+		if (eregi("CALLBK|CBHALT", $dispo))
 			{
-			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' order by callback_id desc LIMIT 1;";
+			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id';";
 				if ($format=='debug') {echo "\n<!-- $stmt -->";}
 			$rslt=mysql_query($stmt, $link);
 			}

agc_1-X/trunk/LANG_agc/agc_de/vicidial.php

@@ -111,6 +111,7 @@
 # 60608-1453 - Added CLOSER campaign allowable in-groups limitations
 # 60609-1123 - Added add-number-to-DNC-list function and manual dial check DNC
 # 60619-1047 - Added variable filters to close security holes for login form
+# 60804-1710 - fixed scheduled CALLBK for other languages build
 #
 
 require("dbconnect.php");
@@ -156,8 +157,8 @@ if (isset($_GET["relogin"]))					{$relogin=$_GET["relogin"];}
 
 $forever_stop=0;
 
-$version = '1.1.85';
-$build = '60619-1047';
+$version = '1.1.86';
+$build = '60804-1710';
 
 if ($force_logout)
 {
@@ -177,7 +178,7 @@ $random = (rand(1000000, 9999999) + 10000000);
 
 $conf_silent_prefix		= '7';	# vicidial_conferences prefix to enter silently
 $HKuser_level			= '5';	# minimum vicidial user_level for HotKeys
-#$campaign_login_list	= '1';	# show drop-down list of campaigns at login	
+$campaign_login_list	= '1';	# show drop-down list of campaigns at login	
 $manual_dial_preview	= '1';	# allow preview lead option when manual dial
 $multi_line_comments	= '1';	# set to 1 to allow multi-line comment box
 $user_login_first		= '0';	# set to 1 to have the vicidial_user login before the phone login
@@ -847,13 +848,13 @@ else
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		$affected_rows = mysql_affected_rows($link);
-		print "<!-- alte WARTESCHLANGE und INANRUF umgeschaltete Liste:   |$affected_rows| -->\n";
+		print "<!-- alte WARTESCHLANGE und INCALL umgeschaltete Liste:   |$affected_rows| -->\n";
 
 		$stmt="DELETE from vicidial_hopper where status IN('QUEUE','INCALL','DONE') and user ='$VD_login';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		$affected_rows = mysql_affected_rows($link);
-		print "<!-- alte WARTESCHLANGE und INANRUF umgeschalteter Zufuhrbehälter: |$affected_rows| -->\n";
+		print "<!-- alte WARTESCHLANGE und INCALL umgeschalteter Zufuhrbehälter: |$affected_rows| -->\n";
 
 		$stmt="DELETE from vicidial_live_agents where user ='$VD_login';";
 		if ($DB) {echo "$stmt\n";}
@@ -1319,23 +1320,23 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	var AgainCalLSecondS = '';
 	var AgaiNCalLCID = '';
 	var CB_count_check = 60;
-	var agentcallsstatus = '<? echo $agentcallsstatus ?>'
-	var campagentstatctmax = '<? echo $campagentstatctmax ?>'
-	var campagentstatct = '0'
+	var agentcallsstatus = '<? echo $agentcallsstatus ?>';
+	var campagentstatctmax = '<? echo $campagentstatctmax ?>';
+	var campagentstatct = '0';
 	var manual_dial_in_progress = 0;
 	var auto_dial_alt_dial = 0;
 	var reselect_preview_dial = 0;
 	var reselect_alt_dial = 0;
 	var alt_dial_active = 0;
 	var mdnLisT_id = '999';
-	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>'
-	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>'
-	var agentcall_manual = '<? echo $agentcall_manual ?>'
-	var manual_dial_preview = '<? echo $manual_dial_preview ?>'
-	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var wrapup_Sekunden = '<? echo $wrapup_Sekunden ?>'
-	var wrapup_message = '<? echo $wrapup_message ?>'
+	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>';
+	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>';
+	var agentcall_manual = '<? echo $agentcall_manual ?>';
+	var manual_dial_preview = '<? echo $manual_dial_preview ?>';
+	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var wrapup_Sekunden = '<? echo $wrapup_Sekunden ?>';
+	var wrapup_message = '<? echo $wrapup_message ?>';
 	var wrapup_counter = 0;
 	var wrapup_waiting = 0;
 	var use_internal_dnc = '<? echo $use_internal_dnc ?>'
@@ -2258,7 +2259,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						var CB_calls = all_CBs_array[0];
 						var loop_ct=0;
 						var conv_start=0;
-						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">ANRUFBACK DATE/TIME</td><td><font class=\"log_title\">ZAHL</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUS</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST ANRUFDATE/TIME</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
+						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> ANRUFBACK DATE/TIME</td><td><font class=\"log_title\">ZAHL</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUS</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST ANRUFDATE/TIME</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
 						while (loop_ct < CB_calls)
 							{
 							loop_ct++;
@@ -2675,7 +2676,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						VDIC_web_form_address = VICIDiaL_web_form_address;
 
-						if (LeaDPreVDispO == 'ANRUFBK')
+						if (LeaDPreVDispO == 'CALLBK')
 							{
 							document.getElementById("CusTInfOSpaN").innerHTML = " <B> PREVIOUS ANRUFBACK </B>";
 							document.getElementById("CusTInfOSpaN").style.background = CusTCB_bgcolor;
@@ -2697,7 +2698,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 							document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_de.gif\" border=0 alt=\"Hängezustand-Kunde\"></a>";
 
-							if (campaign_recording == 'ALLANRUFS')
+							if (campaign_recording == 'ALLCALLS')
 								{all_record = 'YES';}
 
 							if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -2889,7 +2890,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 					var MDOnextResponse_array=MDOnextResponse.split("\n");
 					MDnextCID = MDOnextResponse_array[0];
-					if (MDnextCID == "ANRUF NOT PLACED")
+					if (MDnextCID == " ANRUF NOT PLACED")
 						{
 						alert("Anruf wurde nicht gesetzt, es gab eine Störung:\n" + MDOnextResponse);
 						}
@@ -2902,7 +2903,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_de.gif\" border=0 alt=\"Hängezustand-Kunde\"></a>";
 
-						if (campaign_recording == 'ALLANRUFS')
+						if (campaign_recording == 'ALLCALLS')
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -3116,7 +3117,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						lead_dial_number = document.vicidial_form.phone_number.value;
 						document.getElementById("MainStatuSSpan").innerHTML = " Ankommend: " + document.vicidial_form.phone_number.value + " UID: " + CIDcheck + " &nbsp; " + VDIC_fronter; 
 
-						if (LeaDPreVDispO == 'ANRUFBK')
+						if (LeaDPreVDispO == 'CALLBK')
 							{
 							document.getElementById("CusTInfOSpaN").innerHTML = " <B> PREVIOUS ANRUFBACK </B>";
 							document.getElementById("CusTInfOSpaN").style.background = CusTCB_bgcolor;
@@ -3212,7 +3213,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("WebFormSpan").innerHTML = "<a href=\"" + VDIC_web_form_address + web_form_vars + "\" target=\"vdcwebform\" onMouseOver=\"WebFormRefresH();\"><IMG SRC=\"../agc/images/vdc_LB_webform_de.gif\" border=0 alt=\"Netz-Form\"></a>\n";
 
-						if (campaign_recording == 'ALLANRUFS')
+						if (campaign_recording == 'ALLCALLS')
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (CalL_ScripT_id.length > 0) )
@@ -3715,7 +3716,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 		{
 		AgentDispoing = 1;
 		var VD_statuses_ct_half = parseInt(VD_statuses_ct / 2);
-		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B>ANRUF DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
+		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B> ANRUF DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
 		var loop_ct = 0;
 		while (loop_ct < VD_statuses_ct)
 			{
@@ -3776,7 +3777,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 			document.getElementById("CusTInfOSpaN").innerHTML = "";
 			document.getElementById("CusTInfOSpaN").style.background = panel_bgcolor;
 
-			if ( (DispoChoice == 'ANRUFBK') && (scheduled_callbacks > 0) ) {showDiv('CallBackSelectBox');}
+			if ( (DispoChoice == 'CALLBK') && (scheduled_callbacks > 0) ) {showDiv('CallBackSelectBox');}
 			else
 				{
 				var xmlhttp=false;

agc_1-X/trunk/LANG_agc/agc_el/astguiclient.php

@@ -53,7 +53,8 @@
 # 60104-1347 - Added basic layout for favorites editing frame
 # 60105-1124 - Finished Favorites frame and added DB submission
 # 60112-1622 - Several formatting changes
-# 60421-1043 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60421-1357 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1103 - Added variable filters to close security holes for login form
 # 
 
 require("dbconnect.php");
@@ -87,8 +88,16 @@ $user_abb = "$user$user$user$user";
 while ( (strlen($user_abb) > 4) and ($forever_stop < 200) )
 	{$user_abb = eregi_replace("^.","",$user_abb);   $forever_stop++;}
 
-$version = '1.1.11';
-$build = '60421-1043';
+$version = '1.1.12';
+$build = '60619-1103';
+
+### security strip all non-alphanumeric characters out of the variables ###
+	$DB=ereg_replace("[^0-9a-z]","",$DB);
+	$phone_login=ereg_replace("[^0-9a-zA-Z]","",$phone_login);
+	$phone_pass=ereg_replace("[^0-9a-zA-Z]","",$phone_pass);
+	$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+	$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+
 
 if ($force_logout)
 {
@@ -363,8 +372,8 @@ else
 		while ($favorites_count > $o) 
 			{
 			$stmt="SELECT fullname,protocol from phones where extension = '$favorites[$o]' and server_ip='$server_ip';";
-			$rsltx=mysql_query($stmt, $link);
-			$rowx=mysql_fetch_row($rsltx);
+			$rslt=mysql_query($stmt, $link);
+			$rowx=mysql_fetch_row($rslt);
 			$favorites_names[$o] =	$rowx[0];
 			$favorites_listX .= "$rowx[1]/$favorites[$o],";
 			$o++;
@@ -1516,7 +1525,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (out_calls > 0)
 						{
-						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">ΗΜΕΡΟΜΗΝΙΑ/ΧΡΟΝΟΣ ΚΛΗΣΗΣ</td><td><font class=\"log_title\">ΑΡΙΘΜΟΣ</td><td align=right><font class=\"log_title\">ΜΗΚΟΣ (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
+						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> ΗΜΕΡΟΜΗΝΙΑ/ΧΡΟΝΟΣ ΚΛΗΣΗΣ</td><td><font class=\"log_title\">ΑΡΙΘΜΟΣ</td><td align=right><font class=\"log_title\">ΜΗΚΟΣ (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < out_calls)
 							{
 							loop_ct++;
@@ -1544,7 +1553,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (in_calls > 0)
 						{
-						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">ΗΜΕΡΟΜΗΝΙΑ/ΧΡΟΝΟΣ ΚΛΗΣΗΣ</td><td><font class=\"log_title\">ΣΕ-ΑΡΙΘΜΟ</td><td COLSPAN=2><font class=\"log_title\">ΚΛΗΣΗERID</td><td align=right><font class=\"log_title\">ΜΗΚΟΣ</td><td><font class=\"log_title\"> </td></tr>"
+						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> ΗΜΕΡΟΜΗΝΙΑ/ΧΡΟΝΟΣ ΚΛΗΣΗΣ</td><td><font class=\"log_title\">ΣΕ-ΑΡΙΘΜΟ</td><td COLSPAN=2><font class=\"log_title\">CALLERID</td><td align=right><font class=\"log_title\">ΜΗΚΟΣ</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < in_calls)
 							{
 							loop_ct++;

agc_1-X/trunk/LANG_agc/agc_el/vdc_db_query.php

@@ -372,7 +372,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 		$affected_rows=1;
 		$CBleadIDset=1;
 
-		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where callback_id='$callback_id';";
+		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' and status NOT IN('INACTIVE','DEAD','ARCHIVE');";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		}
@@ -493,7 +493,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 
 			$called_count++;
 
-			### flag the lead as called and change it's status to INΚΛΗΣΗ
+			### flag the lead as called and change it's status to INCALL
 			$stmt = "UPDATE vicidial_list set status='INCALL', called_since_last_reset='Y', called_count='$called_count',user='$user' where lead_id='$lead_id';";
 			if ($DB) {echo "$stmt\n";}
 			$rslt=mysql_query($stmt, $link);
@@ -603,7 +603,7 @@ if ($ACTION == 'manDiaLskip')
 	else
 	{
 		$called_count = ($called_count - 1);
-		### flag the lead as called and change it's status to INΚΛΗΣΗ
+		### flag the lead as called and change it's status to INCALL
 		$stmt = "UPDATE vicidial_list set status='$stage', called_count='$called_count',user='$user' where lead_id='$lead_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
@@ -626,7 +626,7 @@ if ($ACTION == 'manDiaLonly')
 	if ( (strlen($conf_exten)<1) || (strlen($campaign)<1) || (strlen($ext_context)<1) || (strlen($phone_number)<1) || (strlen($lead_id)<1) )
 	{
 		$channel_live=0;
-		echo "ΚΛΗΣΗ NOT PLACED\n";
+		echo " ΚΛΗΣΗ NOT PLACED\n";
 		echo "Conf Exten $conf_exten or campaign $campaign or ext_context $ext_context δεν ισχύει\n";
 		exit;
 	}
@@ -758,7 +758,7 @@ if ($stage == "start")
 
 	#	if ($affected_rows > 0)
 	#		{
-	#		echo "ΚΛΗΣΗ_LOG Εισαγωγή : $uniqueid|$channel|$NOW_TIME";
+	#		echo "CALL_LOG Εισαγωγή : $uniqueid|$channel|$NOW_TIME";
 	#		}
 	#	else
 	#		{
@@ -979,7 +979,7 @@ if ($ACTION == 'VDADcheckINCOMING')
 			if (strlen($call_server_ip)<7) {$call_server_ip = $server_ip;}
 		echo "1\n" . $lead_id . '|' . $uniqueid . '|' . $callerid . '|' . $channel . '|' . $call_server_ip . "|\n";
 
-		### update the agent status to INΚΛΗΣΗ in vicidial_live_agents
+		### update the agent status to INCALL in vicidial_live_agents
 		$stmt = "UPDATE vicidial_live_agents set status='INCALL',last_call_time='$NOW_TIME' where user='$user' and server_ip='$server_ip';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
@@ -1021,19 +1021,19 @@ if ($ACTION == 'VDADcheckINCOMING')
 			$called_count	= trim("$row[30]");
 			}
 
-		### update the lead status to INΚΛΗΣΗ
+		### update the lead status to INCALL
 		$stmt = "UPDATE vicidial_list set status='INCALL', user='$user' where lead_id='$lead_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
-		### update the log status to INΚΛΗΣΗ
+		### update the log status to INCALL
 		$stmt = "UPDATE vicidial_log set user='$user', comments='AUTO', list_id='$list_id', status='INCALL' where lead_id='$lead_id' and uniqueid='$uniqueid';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
 		if (eregi("CLOSER",$campaign))
 			{
-			### update the vicidial_closer_log user to INΚΛΗΣΗ
+			### update the vicidial_closer_log user to INCALL
 			$stmt = "UPDATE vicidial_closer_log set user='$user', comments='AUTO', list_id='$list_id', status='INCALL' where lead_id='$lead_id' order by closecallid desc limit 1;";
 			if ($DB) {echo "$stmt\n";}
 			$rslt=mysql_query($stmt, $link);
@@ -1181,9 +1181,9 @@ if ($ACTION == 'VDADcheckINCOMING')
 		$rslt=mysql_query($stmt, $link);
 
 		### If ΚΛΗΣΗBK, change vicidial_callback record to INACTIVE
-		if ($dispo == 'ΚΛΗΣΗBK')
+		if (eregi("CALLBK|CBHΠΑΛΑΙΟ", $dispo))
 			{
-			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' order by callback_id desc LIMIT 1;";
+			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id';";
 				if ($format=='debug') {echo "\n<!-- $stmt -->";}
 			$rslt=mysql_query($stmt, $link);
 			}

agc_1-X/trunk/LANG_agc/agc_el/vicidial.php

@@ -111,6 +111,7 @@
 # 60608-1453 - Added CLOSER campaign allowable in-groups limitations
 # 60609-1123 - Added add-number-to-DNC-list function and manual dial check DNC
 # 60619-1047 - Added variable filters to close security holes for login form
+# 60804-1710 - fixed scheduled CALLBK for other languages build
 #
 
 require("dbconnect.php");
@@ -156,8 +157,8 @@ if (isset($_GET["relogin"]))					{$relogin=$_GET["relogin"];}
 
 $forever_stop=0;
 
-$version = '1.1.85';
-$build = '60619-1047';
+$version = '1.1.86';
+$build = '60804-1710';
 
 if ($force_logout)
 {
@@ -177,7 +178,7 @@ $random = (rand(1000000, 9999999) + 10000000);
 
 $conf_silent_prefix		= '7';	# vicidial_conferences prefix to enter silently
 $HKuser_level			= '5';	# minimum vicidial user_level for HotKeys
-#$campaign_login_list	= '1';	# show drop-down list of campaigns at login	
+$campaign_login_list	= '1';	# show drop-down list of campaigns at login	
 $manual_dial_preview	= '1';	# allow preview lead option when manual dial
 $multi_line_comments	= '1';	# set to 1 to allow multi-line comment box
 $user_login_first		= '0';	# set to 1 to have the vicidial_user login before the phone login
@@ -1319,23 +1320,23 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	var AgainCalLSecondS = '';
 	var AgaiNCalLCID = '';
 	var CB_count_check = 60;
-	var agentcallsstatus = '<? echo $agentcallsstatus ?>'
-	var campagentstatctmax = '<? echo $campagentstatctmax ?>'
-	var campagentstatct = '0'
+	var agentcallsstatus = '<? echo $agentcallsstatus ?>';
+	var campagentstatctmax = '<? echo $campagentstatctmax ?>';
+	var campagentstatct = '0';
 	var manual_dial_in_progress = 0;
 	var auto_dial_alt_dial = 0;
 	var reselect_preview_dial = 0;
 	var reselect_alt_dial = 0;
 	var alt_dial_active = 0;
 	var mdnLisT_id = '999';
-	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>'
-	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>'
-	var agentcall_manual = '<? echo $agentcall_manual ?>'
-	var manual_dial_preview = '<? echo $manual_dial_preview ?>'
-	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var wrapup_δευτερόλεπτα = '<? echo $wrapup_δευτερόλεπτα ?>'
-	var wrapup_message = '<? echo $wrapup_message ?>'
+	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>';
+	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>';
+	var agentcall_manual = '<? echo $agentcall_manual ?>';
+	var manual_dial_preview = '<? echo $manual_dial_preview ?>';
+	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var wrapup_δευτερόλεπτα = '<? echo $wrapup_δευτερόλεπτα ?>';
+	var wrapup_message = '<? echo $wrapup_message ?>';
 	var wrapup_counter = 0;
 	var wrapup_waiting = 0;
 	var use_internal_dnc = '<? echo $use_internal_dnc ?>'
@@ -2258,7 +2259,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						var CB_calls = all_CBs_array[0];
 						var loop_ct=0;
 						var conv_start=0;
-						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">ΚΛΗΣΗBACK DATE/TIME</td><td><font class=\"log_title\">ΑΡΙΘΜΟΣ</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">ΚΑΤΑΣΤΑΣΗ</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST ΗΜΕΡΟΜΗΝΙΑ/ΧΡΟΝΟΣ ΚΛΗΣΗΣ</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
+						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> ΚΛΗΣΗBACK DATE/TIME</td><td><font class=\"log_title\">ΑΡΙΘΜΟΣ</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">ΚΑΤΑΣΤΑΣΗ</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST ΗΜΕΡΟΜΗΝΙΑ/ΧΡΟΝΟΣ ΚΛΗΣΗΣ</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
 						while (loop_ct < CB_calls)
 							{
 							loop_ct++;
@@ -2675,7 +2676,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						VDIC_web_form_address = VICIDiaL_web_form_address;
 
-						if (LeaDPreVDispO == 'ΚΛΗΣΗBK')
+						if (LeaDPreVDispO == 'CALLBK')
 							{
 							document.getElementById("CusTInfOSpaN").innerHTML = " <B> PREVIOUS ΚΛΗΣΗBACK </B>";
 							document.getElementById("CusTInfOSpaN").style.background = CusTCB_bgcolor;
@@ -2697,7 +2698,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 							document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_el.gif\" border=0 alt=\"΄Κλείσιμο Πελάτη\"></a>";
 
-							if (campaign_recording == 'ALLΚΛΗΣΗS')
+							if (campaign_recording == 'ALLCALLS')
 								{all_record = 'YES';}
 
 							if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -2889,7 +2890,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 					var MDOnextResponse_array=MDOnextResponse.split("\n");
 					MDnextCID = MDOnextResponse_array[0];
-					if (MDnextCID == "ΚΛΗΣΗ NOT PLACED")
+					if (MDnextCID == " ΚΛΗΣΗ NOT PLACED")
 						{
 						alert("η κλήση δεν τοποθετήθηκε, υπήρξε ένα λάθος:\n" + MDOnextResponse);
 						}
@@ -2902,7 +2903,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_el.gif\" border=0 alt=\"΄Κλείσιμο Πελάτη\"></a>";
 
-						if (campaign_recording == 'ALLΚΛΗΣΗS')
+						if (campaign_recording == 'ALLCALLS')
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -3116,7 +3117,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						lead_dial_number = document.vicidial_form.phone_number.value;
 						document.getElementById("MainStatuSSpan").innerHTML = " Εισερχόμενο: " + document.vicidial_form.phone_number.value + " UID: " + CIDcheck + " &nbsp; " + VDIC_fronter; 
 
-						if (LeaDPreVDispO == 'ΚΛΗΣΗBK')
+						if (LeaDPreVDispO == 'CALLBK')
 							{
 							document.getElementById("CusTInfOSpaN").innerHTML = " <B> PREVIOUS ΚΛΗΣΗBACK </B>";
 							document.getElementById("CusTInfOSpaN").style.background = CusTCB_bgcolor;
@@ -3212,7 +3213,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("WebFormSpan").innerHTML = "<a href=\"" + VDIC_web_form_address + web_form_vars + "\" target=\"vdcwebform\" onMouseOver=\"WebFormRefresH();\"><IMG SRC=\"../agc/images/vdc_LB_webform_el.gif\" border=0 alt=\"Σελίδα Διαδικτύου\"></a>\n";
 
-						if (campaign_recording == 'ALLΚΛΗΣΗS')
+						if (campaign_recording == 'ALLCALLS')
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (CalL_ScripT_id.length > 0) )
@@ -3715,7 +3716,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 		{
 		AgentDispoing = 1;
 		var VD_statuses_ct_half = parseInt(VD_statuses_ct / 2);
-		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B>ΚΛΗΣΗ DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
+		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B> ΚΛΗΣΗ DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
 		var loop_ct = 0;
 		while (loop_ct < VD_statuses_ct)
 			{
@@ -3776,7 +3777,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 			document.getElementById("CusTInfOSpaN").innerHTML = "";
 			document.getElementById("CusTInfOSpaN").style.background = panel_bgcolor;
 
-			if ( (DispoChoice == 'ΚΛΗΣΗBK') && (scheduled_callbacks > 0) ) {showDiv('CallBackSelectBox');}
+			if ( (DispoChoice == 'CALLBK') && (scheduled_callbacks > 0) ) {showDiv('CallBackSelectBox');}
 			else
 				{
 				var xmlhttp=false;

agc_1-X/trunk/LANG_agc/agc_en/astguiclient.php

@@ -53,7 +53,8 @@
 # 60104-1347 - Added basic layout for favorites editing frame
 # 60105-1124 - Finished Favorites frame and added DB submission
 # 60112-1622 - Several formatting changes
-# 60421-1043 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60421-1357 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1103 - Added variable filters to close security holes for login form
 # 
 
 require("dbconnect.php");
@@ -87,8 +88,16 @@ $user_abb = "$user$user$user$user";
 while ( (strlen($user_abb) > 4) and ($forever_stop < 200) )
 	{$user_abb = eregi_replace("^.","",$user_abb);   $forever_stop++;}
 
-$version = '1.1.11';
-$build = '60421-1043';
+$version = '1.1.12';
+$build = '60619-1103';
+
+### security strip all non-alphanumeric characters out of the variables ###
+	$DB=ereg_replace("[^0-9a-z]","",$DB);
+	$phone_login=ereg_replace("[^0-9a-zA-Z]","",$phone_login);
+	$phone_pass=ereg_replace("[^0-9a-zA-Z]","",$phone_pass);
+	$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+	$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+
 
 if ($force_logout)
 {
@@ -363,8 +372,8 @@ else
 		while ($favorites_count > $o) 
 			{
 			$stmt="SELECT fullname,protocol from phones where extension = '$favorites[$o]' and server_ip='$server_ip';";
-			$rsltx=mysql_query($stmt, $link);
-			$rowx=mysql_fetch_row($rsltx);
+			$rslt=mysql_query($stmt, $link);
+			$rowx=mysql_fetch_row($rslt);
 			$favorites_names[$o] =	$rowx[0];
 			$favorites_listX .= "$rowx[1]/$favorites[$o],";
 			$o++;
@@ -1516,7 +1525,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (out_calls > 0)
 						{
-						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">CALL DATE/TIME</td><td><font class=\"log_title\">NUMBER</td><td align=right><font class=\"log_title\">LENGTH (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
+						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> CALL DATE/TIME</td><td><font class=\"log_title\">NUMBER</td><td align=right><font class=\"log_title\">LENGTH (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < out_calls)
 							{
 							loop_ct++;
@@ -1544,7 +1553,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (in_calls > 0)
 						{
-						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">CALL DATE/TIME</td><td><font class=\"log_title\">IN-NUMBER</td><td COLSPAN=2><font class=\"log_title\">CALLERID</td><td align=right><font class=\"log_title\">LENGTH</td><td><font class=\"log_title\"> </td></tr>"
+						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> CALL DATE/TIME</td><td><font class=\"log_title\">IN-NUMBER</td><td COLSPAN=2><font class=\"log_title\">CALLERID</td><td align=right><font class=\"log_title\">LENGTH</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < in_calls)
 							{
 							loop_ct++;

agc_1-X/trunk/LANG_agc/agc_en/vdc_db_query.php

@@ -372,7 +372,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 		$affected_rows=1;
 		$CBleadIDset=1;
 
-		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where callback_id='$callback_id';";
+		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' and status NOT IN('INACTIVE','DEAD','ARCHIVE');";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		}
@@ -626,7 +626,7 @@ if ($ACTION == 'manDiaLonly')
 	if ( (strlen($conf_exten)<1) || (strlen($campaign)<1) || (strlen($ext_context)<1) || (strlen($phone_number)<1) || (strlen($lead_id)<1) )
 	{
 		$channel_live=0;
-		echo "CALL NOT PLACED\n";
+		echo " CALL NOT PLACED\n";
 		echo "Conf Exten $conf_exten or campaign $campaign or ext_context $ext_context is not valid\n";
 		exit;
 	}
@@ -1181,9 +1181,9 @@ if ($ACTION == 'VDADcheckINCOMING')
 		$rslt=mysql_query($stmt, $link);
 
 		### If CALLBK, change vicidial_callback record to INACTIVE
-		if ($dispo == 'CALLBK')
+		if (eregi("CALLBK|CBHOLD", $dispo))
 			{
-			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' order by callback_id desc LIMIT 1;";
+			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id';";
 				if ($format=='debug') {echo "\n<!-- $stmt -->";}
 			$rslt=mysql_query($stmt, $link);
 			}

agc_1-X/trunk/LANG_agc/agc_en/vicidial.php

@@ -111,6 +111,7 @@
 # 60608-1453 - Added CLOSER campaign allowable in-groups limitations
 # 60609-1123 - Added add-number-to-DNC-list function and manual dial check DNC
 # 60619-1047 - Added variable filters to close security holes for login form
+# 60804-1710 - fixed scheduled CALLBK for other languages build
 #
 
 require("dbconnect.php");
@@ -156,8 +157,8 @@ if (isset($_GET["relogin"]))					{$relogin=$_GET["relogin"];}
 
 $forever_stop=0;
 
-$version = '1.1.85';
-$build = '60619-1047';
+$version = '1.1.86';
+$build = '60804-1710';
 
 if ($force_logout)
 {
@@ -177,7 +178,7 @@ $random = (rand(1000000, 9999999) + 10000000);
 
 $conf_silent_prefix		= '7';	# vicidial_conferences prefix to enter silently
 $HKuser_level			= '5';	# minimum vicidial user_level for HotKeys
-#$campaign_login_list	= '1';	# show drop-down list of campaigns at login	
+$campaign_login_list	= '1';	# show drop-down list of campaigns at login	
 $manual_dial_preview	= '1';	# allow preview lead option when manual dial
 $multi_line_comments	= '1';	# set to 1 to allow multi-line comment box
 $user_login_first		= '0';	# set to 1 to have the vicidial_user login before the phone login
@@ -1319,23 +1320,23 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	var AgainCalLSecondS = '';
 	var AgaiNCalLCID = '';
 	var CB_count_check = 60;
-	var agentcallsstatus = '<? echo $agentcallsstatus ?>'
-	var campagentstatctmax = '<? echo $campagentstatctmax ?>'
-	var campagentstatct = '0'
+	var agentcallsstatus = '<? echo $agentcallsstatus ?>';
+	var campagentstatctmax = '<? echo $campagentstatctmax ?>';
+	var campagentstatct = '0';
 	var manual_dial_in_progress = 0;
 	var auto_dial_alt_dial = 0;
 	var reselect_preview_dial = 0;
 	var reselect_alt_dial = 0;
 	var alt_dial_active = 0;
 	var mdnLisT_id = '999';
-	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>'
-	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>'
-	var agentcall_manual = '<? echo $agentcall_manual ?>'
-	var manual_dial_preview = '<? echo $manual_dial_preview ?>'
-	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var wrapup_seconds = '<? echo $wrapup_seconds ?>'
-	var wrapup_message = '<? echo $wrapup_message ?>'
+	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>';
+	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>';
+	var agentcall_manual = '<? echo $agentcall_manual ?>';
+	var manual_dial_preview = '<? echo $manual_dial_preview ?>';
+	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var wrapup_seconds = '<? echo $wrapup_seconds ?>';
+	var wrapup_message = '<? echo $wrapup_message ?>';
 	var wrapup_counter = 0;
 	var wrapup_waiting = 0;
 	var use_internal_dnc = '<? echo $use_internal_dnc ?>'
@@ -2258,7 +2259,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						var CB_calls = all_CBs_array[0];
 						var loop_ct=0;
 						var conv_start=0;
-						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">CALLBACK DATE/TIME</td><td><font class=\"log_title\">NUMBER</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUS</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST CALL DATE/TIME</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
+						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> CALLBACK DATE/TIME</td><td><font class=\"log_title\">NUMBER</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUS</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST CALL DATE/TIME</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
 						while (loop_ct < CB_calls)
 							{
 							loop_ct++;
@@ -2889,7 +2890,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 					var MDOnextResponse_array=MDOnextResponse.split("\n");
 					MDnextCID = MDOnextResponse_array[0];
-					if (MDnextCID == "CALL NOT PLACED")
+					if (MDnextCID == " CALL NOT PLACED")
 						{
 						alert("call was not placed, there was an error:\n" + MDOnextResponse);
 						}
@@ -3715,7 +3716,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 		{
 		AgentDispoing = 1;
 		var VD_statuses_ct_half = parseInt(VD_statuses_ct / 2);
-		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B>CALL DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
+		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B> CALL DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
 		var loop_ct = 0;
 		while (loop_ct < VD_statuses_ct)
 			{

agc_1-X/trunk/LANG_agc/agc_es/astguiclient.php

@@ -53,7 +53,8 @@
 # 60104-1347 - Added basic layout for favorites editing frame
 # 60105-1124 - Finished Favorites frame and added DB submission
 # 60112-1622 - Several formatting changes
-# 60421-1043 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60421-1357 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1103 - Added variable filters to close security holes for login form
 # 
 
 require("dbconnect.php");
@@ -87,8 +88,16 @@ $user_abb = "$user$user$user$user";
 while ( (strlen($user_abb) > 4) and ($forever_stop < 200) )
 	{$user_abb = eregi_replace("^.","",$user_abb);   $forever_stop++;}
 
-$version = '1.1.11';
-$build = '60421-1043';
+$version = '1.1.12';
+$build = '60619-1103';
+
+### security strip all non-alphanumeric characters out of the variables ###
+	$DB=ereg_replace("[^0-9a-z]","",$DB);
+	$phone_login=ereg_replace("[^0-9a-zA-Z]","",$phone_login);
+	$phone_pass=ereg_replace("[^0-9a-zA-Z]","",$phone_pass);
+	$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+	$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+
 
 if ($force_logout)
 {
@@ -363,8 +372,8 @@ else
 		while ($favorites_count > $o) 
 			{
 			$stmt="SELECT fullname,protocol from phones where extension = '$favorites[$o]' and server_ip='$server_ip';";
-			$rsltx=mysql_query($stmt, $link);
-			$rowx=mysql_fetch_row($rsltx);
+			$rslt=mysql_query($stmt, $link);
+			$rowx=mysql_fetch_row($rslt);
 			$favorites_names[$o] =	$rowx[0];
 			$favorites_listX .= "$rowx[1]/$favorites[$o],";
 			$o++;
@@ -1516,7 +1525,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (out_calls > 0)
 						{
-						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">FECHA/HORA DE LA LLAMADA</td><td><font class=\"log_title\">NÚMERO</td><td align=right><font class=\"log_title\">LONGITUD (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
+						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> FECHA/HORA DE LA LLAMADA</td><td><font class=\"log_title\">NÚMERO</td><td align=right><font class=\"log_title\">LONGITUD (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < out_calls)
 							{
 							loop_ct++;
@@ -1544,7 +1553,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (in_calls > 0)
 						{
-						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">FECHA/HORA DE LA LLAMADA</td><td><font class=\"log_title\">NÚMERO-ENTRANTE</td><td COLSPAN=2><font class=\"log_title\">LLAMADORID</td><td align=right><font class=\"log_title\">LONGITUD</td><td><font class=\"log_title\"> </td></tr>"
+						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> FECHA/HORA DE LA LLAMADA</td><td><font class=\"log_title\">NÚMERO-ENTRANTE</td><td COLSPAN=2><font class=\"log_title\">LLAMADORID</td><td align=right><font class=\"log_title\">LONGITUD</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < in_calls)
 							{
 							loop_ct++;

agc_1-X/trunk/LANG_agc/agc_es/vdc_db_query.php

@@ -372,7 +372,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 		$affected_rows=1;
 		$CBleadIDset=1;
 
-		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where callback_id='$callback_id';";
+		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' and status NOT IN('INACTIVE','DEAD','ARCHIVE');";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		}
@@ -493,7 +493,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 
 			$called_count++;
 
-			### flag the lead as called and change it's status to INLLAMADA
+			### flag the lead as called and change it's status to INCALL
 			$stmt = "UPDATE vicidial_list set status='INCALL', called_since_last_reset='Y', called_count='$called_count',user='$user' where lead_id='$lead_id';";
 			if ($DB) {echo "$stmt\n";}
 			$rslt=mysql_query($stmt, $link);
@@ -603,7 +603,7 @@ if ($ACTION == 'manDiaLskip')
 	else
 	{
 		$called_count = ($called_count - 1);
-		### flag the lead as called and change it's status to INLLAMADA
+		### flag the lead as called and change it's status to INCALL
 		$stmt = "UPDATE vicidial_list set status='$stage', called_count='$called_count',user='$user' where lead_id='$lead_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
@@ -626,7 +626,7 @@ if ($ACTION == 'manDiaLonly')
 	if ( (strlen($conf_exten)<1) || (strlen($campaign)<1) || (strlen($ext_context)<1) || (strlen($phone_number)<1) || (strlen($lead_id)<1) )
 	{
 		$channel_live=0;
-		echo "LLAMADA NOT PLACED\n";
+		echo " LLAMADA NOT PLACED\n";
 		echo "Conf Exten $conf_exten or campaign $campaign or ext_context $ext_context No es válido\n";
 		exit;
 	}
@@ -758,7 +758,7 @@ if ($stage == "start")
 
 	#	if ($affected_rows > 0)
 	#		{
-	#		echo "LLAMADA_LOG Insertado: $uniqueid|$channel|$NOW_TIME";
+	#		echo "CALL_LOG Insertado: $uniqueid|$channel|$NOW_TIME";
 	#		}
 	#	else
 	#		{
@@ -979,7 +979,7 @@ if ($ACTION == 'VDADcheckINCOMING')
 			if (strlen($call_server_ip)<7) {$call_server_ip = $server_ip;}
 		echo "1\n" . $lead_id . '|' . $uniqueid . '|' . $callerid . '|' . $channel . '|' . $call_server_ip . "|\n";
 
-		### update the agent status to INLLAMADA in vicidial_live_agents
+		### update the agent status to INCALL in vicidial_live_agents
 		$stmt = "UPDATE vicidial_live_agents set status='INCALL',last_call_time='$NOW_TIME' where user='$user' and server_ip='$server_ip';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
@@ -1021,19 +1021,19 @@ if ($ACTION == 'VDADcheckINCOMING')
 			$called_count	= trim("$row[30]");
 			}
 
-		### update the lead status to INLLAMADA
+		### update the lead status to INCALL
 		$stmt = "UPDATE vicidial_list set status='INCALL', user='$user' where lead_id='$lead_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
-		### update the log status to INLLAMADA
+		### update the log status to INCALL
 		$stmt = "UPDATE vicidial_log set user='$user', comments='AUTO', list_id='$list_id', status='INCALL' where lead_id='$lead_id' and uniqueid='$uniqueid';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
 		if (eregi("CLOSER",$campaign))
 			{
-			### update the vicidial_closer_log user to INLLAMADA
+			### update the vicidial_closer_log user to INCALL
 			$stmt = "UPDATE vicidial_closer_log set user='$user', comments='AUTO', list_id='$list_id', status='INCALL' where lead_id='$lead_id' order by closecallid desc limit 1;";
 			if ($DB) {echo "$stmt\n";}
 			$rslt=mysql_query($stmt, $link);
@@ -1181,9 +1181,9 @@ if ($ACTION == 'VDADcheckINCOMING')
 		$rslt=mysql_query($stmt, $link);
 
 		### If LLAMADABK, change vicidial_callback record to INACTIVE
-		if ($dispo == 'LLAMADABK')
+		if (eregi("CALLBK|CBHVIEJO", $dispo))
 			{
-			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' order by callback_id desc LIMIT 1;";
+			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id';";
 				if ($format=='debug') {echo "\n<!-- $stmt -->";}
 			$rslt=mysql_query($stmt, $link);
 			}

agc_1-X/trunk/LANG_agc/agc_es/vicidial.php

@@ -111,6 +111,7 @@
 # 60608-1453 - Added CLOSER campaign allowable in-groups limitations
 # 60609-1123 - Added add-number-to-DNC-list function and manual dial check DNC
 # 60619-1047 - Added variable filters to close security holes for login form
+# 60804-1710 - fixed scheduled CALLBK for other languages build
 #
 
 require("dbconnect.php");
@@ -156,8 +157,8 @@ if (isset($_GET["relogin"]))					{$relogin=$_GET["relogin"];}
 
 $forever_stop=0;
 
-$version = '1.1.85';
-$build = '60619-1047';
+$version = '1.1.86';
+$build = '60804-1710';
 
 if ($force_logout)
 {
@@ -177,7 +178,7 @@ $random = (rand(1000000, 9999999) + 10000000);
 
 $conf_silent_prefix		= '7';	# vicidial_conferences prefix to enter silently
 $HKuser_level			= '5';	# minimum vicidial user_level for HotKeys
-#$campaign_login_list	= '1';	# show drop-down list of campaigns at login	
+$campaign_login_list	= '1';	# show drop-down list of campaigns at login	
 $manual_dial_preview	= '1';	# allow preview lead option when manual dial
 $multi_line_comments	= '1';	# set to 1 to allow multi-line comment box
 $user_login_first		= '0';	# set to 1 to have the vicidial_user login before the phone login
@@ -847,13 +848,13 @@ else
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		$affected_rows = mysql_affected_rows($link);
-		print "<!-- vieja COLA y lista invertida INLLAMADA:   |$affected_rows| -->\n";
+		print "<!-- vieja COLA y lista invertida INCALL:   |$affected_rows| -->\n";
 
 		$stmt="DELETE from vicidial_hopper where status IN('QUEUE','INCALL','DONE') and user ='$VD_login';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		$affected_rows = mysql_affected_rows($link);
-		print "<!-- vieja COLA y tolva invertida INLLAMADA: |$affected_rows| -->\n";
+		print "<!-- vieja COLA y tolva invertida INCALL: |$affected_rows| -->\n";
 
 		$stmt="DELETE from vicidial_live_agents where user ='$VD_login';";
 		if ($DB) {echo "$stmt\n";}
@@ -1319,23 +1320,23 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	var AgainCalLSecondS = '';
 	var AgaiNCalLCID = '';
 	var CB_count_check = 60;
-	var agentcallsstatus = '<? echo $agentcallsstatus ?>'
-	var campagentstatctmax = '<? echo $campagentstatctmax ?>'
-	var campagentstatct = '0'
+	var agentcallsstatus = '<? echo $agentcallsstatus ?>';
+	var campagentstatctmax = '<? echo $campagentstatctmax ?>';
+	var campagentstatct = '0';
 	var manual_dial_in_progress = 0;
 	var auto_dial_alt_dial = 0;
 	var reselect_preview_dial = 0;
 	var reselect_alt_dial = 0;
 	var alt_dial_active = 0;
 	var mdnLisT_id = '999';
-	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>'
-	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>'
-	var agentcall_manual = '<? echo $agentcall_manual ?>'
-	var manual_dial_preview = '<? echo $manual_dial_preview ?>'
-	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var wrapup_segundos = '<? echo $wrapup_segundos ?>'
-	var wrapup_message = '<? echo $wrapup_message ?>'
+	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>';
+	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>';
+	var agentcall_manual = '<? echo $agentcall_manual ?>';
+	var manual_dial_preview = '<? echo $manual_dial_preview ?>';
+	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var wrapup_segundos = '<? echo $wrapup_segundos ?>';
+	var wrapup_message = '<? echo $wrapup_message ?>';
 	var wrapup_counter = 0;
 	var wrapup_waiting = 0;
 	var use_internal_dnc = '<? echo $use_internal_dnc ?>'
@@ -2258,7 +2259,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						var CB_calls = all_CBs_array[0];
 						var loop_ct=0;
 						var conv_start=0;
-						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">LLAMADABACK DATE/TIME</td><td><font class=\"log_title\">NÚMERO</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">ESTADO</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST FECHA/HORA DE LA LLAMADA</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
+						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> LLAMADABACK DATE/TIME</td><td><font class=\"log_title\">NÚMERO</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">ESTADO</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST FECHA/HORA DE LA LLAMADA</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
 						while (loop_ct < CB_calls)
 							{
 							loop_ct++;
@@ -2675,7 +2676,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						VDIC_web_form_address = VICIDiaL_web_form_address;
 
-						if (LeaDPreVDispO == 'LLAMADABK')
+						if (LeaDPreVDispO == 'CALLBK')
 							{
 							document.getElementById("CusTInfOSpaN").innerHTML = " <B> PREVIOUS LLAMADABACK </B>";
 							document.getElementById("CusTInfOSpaN").style.background = CusTCB_bgcolor;
@@ -2697,7 +2698,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 							document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_es.gif\" border=0 alt=\"Colgar al Cliente\"></a>";
 
-							if (campaign_recording == 'ALLLLAMADAS')
+							if (campaign_recording == 'ALLCALLS')
 								{all_record = 'YES';}
 
 							if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -2889,7 +2890,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 					var MDOnextResponse_array=MDOnextResponse.split("\n");
 					MDnextCID = MDOnextResponse_array[0];
-					if (MDnextCID == "LLAMADA NOT PLACED")
+					if (MDnextCID == " LLAMADA NOT PLACED")
 						{
 						alert("la llamada no fue atendida, hubo un error:\n" + MDOnextResponse);
 						}
@@ -2902,7 +2903,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_es.gif\" border=0 alt=\"Colgar al Cliente\"></a>";
 
-						if (campaign_recording == 'ALLLLAMADAS')
+						if (campaign_recording == 'ALLCALLS')
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -3116,7 +3117,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						lead_dial_number = document.vicidial_form.phone_number.value;
 						document.getElementById("MainStatuSSpan").innerHTML = " Entrante: " + document.vicidial_form.phone_number.value + " UID: " + CIDcheck + " &nbsp; " + VDIC_fronter; 
 
-						if (LeaDPreVDispO == 'LLAMADABK')
+						if (LeaDPreVDispO == 'CALLBK')
 							{
 							document.getElementById("CusTInfOSpaN").innerHTML = " <B> PREVIOUS LLAMADABACK </B>";
 							document.getElementById("CusTInfOSpaN").style.background = CusTCB_bgcolor;
@@ -3212,7 +3213,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("WebFormSpan").innerHTML = "<a href=\"" + VDIC_web_form_address + web_form_vars + "\" target=\"vdcwebform\" onMouseOver=\"WebFormRefresH();\"><IMG SRC=\"../agc/images/vdc_LB_webform_es.gif\" border=0 alt=\"Formulario Web\"></a>\n";
 
-						if (campaign_recording == 'ALLLLAMADAS')
+						if (campaign_recording == 'ALLCALLS')
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (CalL_ScripT_id.length > 0) )
@@ -3715,7 +3716,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 		{
 		AgentDispoing = 1;
 		var VD_statuses_ct_half = parseInt(VD_statuses_ct / 2);
-		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B>LLAMADA DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
+		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B> LLAMADA DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
 		var loop_ct = 0;
 		while (loop_ct < VD_statuses_ct)
 			{
@@ -3776,7 +3777,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 			document.getElementById("CusTInfOSpaN").innerHTML = "";
 			document.getElementById("CusTInfOSpaN").style.background = panel_bgcolor;
 
-			if ( (DispoChoice == 'LLAMADABK') && (scheduled_callbacks > 0) ) {showDiv('CallBackSelectBox');}
+			if ( (DispoChoice == 'CALLBK') && (scheduled_callbacks > 0) ) {showDiv('CallBackSelectBox');}
 			else
 				{
 				var xmlhttp=false;

agc_1-X/trunk/LANG_agc/agc_fr/astguiclient.php

@@ -53,7 +53,8 @@
 # 60104-1347 - Added basic layout for favorites editing frame
 # 60105-1124 - Finished Favorites frame and added DB submission
 # 60112-1622 - Several formatting changes
-# 60421-1043 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60421-1357 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1103 - Added variable filters to close security holes for login form
 # 
 
 require("dbconnect.php");
@@ -87,8 +88,16 @@ $user_abb = "$user$user$user$user";
 while ( (strlen($user_abb) > 4) and ($forever_stop < 200) )
 	{$user_abb = eregi_replace("^.","",$user_abb);   $forever_stop++;}
 
-$version = '1.1.11';
-$build = '60421-1043';
+$version = '1.1.12';
+$build = '60619-1103';
+
+### security strip all non-alphanumeric characters out of the variables ###
+	$DB=ereg_replace("[^0-9a-z]","",$DB);
+	$phone_login=ereg_replace("[^0-9a-zA-Z]","",$phone_login);
+	$phone_pass=ereg_replace("[^0-9a-zA-Z]","",$phone_pass);
+	$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+	$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+
 
 if ($force_logout)
 {
@@ -363,8 +372,8 @@ else
 		while ($favorites_count > $o) 
 			{
 			$stmt="SELECT fullname,protocol from phones where extension = '$favorites[$o]' and server_ip='$server_ip';";
-			$rsltx=mysql_query($stmt, $link);
-			$rowx=mysql_fetch_row($rsltx);
+			$rslt=mysql_query($stmt, $link);
+			$rowx=mysql_fetch_row($rslt);
 			$favorites_names[$o] =	$rowx[0];
 			$favorites_listX .= "$rowx[1]/$favorites[$o],";
 			$o++;
@@ -1516,7 +1525,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (out_calls > 0)
 						{
-						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">DATE/HEURE D'APPEL</td><td><font class=\"log_title\">NOMBRE</td><td align=right><font class=\"log_title\">LONGUEUR (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
+						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> DATE/HEURE D'APPEL</td><td><font class=\"log_title\">NOMBRE</td><td align=right><font class=\"log_title\">LONGUEUR (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < out_calls)
 							{
 							loop_ct++;
@@ -1544,7 +1553,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (in_calls > 0)
 						{
-						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">DATE/HEURE D'APPEL</td><td><font class=\"log_title\">IN-NOMBRE</td><td COLSPAN=2><font class=\"log_title\">APPELERID</td><td align=right><font class=\"log_title\">LONGUEUR</td><td><font class=\"log_title\"> </td></tr>"
+						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> DATE/HEURE D'APPEL</td><td><font class=\"log_title\">IN-NOMBRE</td><td COLSPAN=2><font class=\"log_title\">CALLERID</td><td align=right><font class=\"log_title\">LONGUEUR</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < in_calls)
 							{
 							loop_ct++;

agc_1-X/trunk/LANG_agc/agc_fr/vdc_db_query.php

@@ -372,7 +372,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 		$affected_rows=1;
 		$CBleadIDset=1;
 
-		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where callback_id='$callback_id';";
+		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' and status NOT IN('INACTIVE','DEAD','ARCHIVE');";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		}
@@ -493,7 +493,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 
 			$called_count++;
 
-			### flag the lead as called and change it's status to INAPPEL
+			### flag the lead as called and change it's status to INCALL
 			$stmt = "UPDATE vicidial_list set status='INCALL', called_since_last_reset='Y', called_count='$called_count',user='$user' where lead_id='$lead_id';";
 			if ($DB) {echo "$stmt\n";}
 			$rslt=mysql_query($stmt, $link);
@@ -603,7 +603,7 @@ if ($ACTION == 'manDiaLskip')
 	else
 	{
 		$called_count = ($called_count - 1);
-		### flag the lead as called and change it's status to INAPPEL
+		### flag the lead as called and change it's status to INCALL
 		$stmt = "UPDATE vicidial_list set status='$stage', called_count='$called_count',user='$user' where lead_id='$lead_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
@@ -626,7 +626,7 @@ if ($ACTION == 'manDiaLonly')
 	if ( (strlen($conf_exten)<1) || (strlen($campaign)<1) || (strlen($ext_context)<1) || (strlen($phone_number)<1) || (strlen($lead_id)<1) )
 	{
 		$channel_live=0;
-		echo "APPEL NOT PLACED\n";
+		echo " APPEL NOT PLACED\n";
 		echo "Conf Exten $conf_exten or campaign $campaign or ext_context $ext_context est inadmissible\n";
 		exit;
 	}
@@ -758,7 +758,7 @@ if ($stage == "start")
 
 	#	if ($affected_rows > 0)
 	#		{
-	#		echo "APPEL_LOG Inséré: $uniqueid|$channel|$NOW_TIME";
+	#		echo "CALL_LOG Inséré: $uniqueid|$channel|$NOW_TIME";
 	#		}
 	#	else
 	#		{
@@ -979,7 +979,7 @@ if ($ACTION == 'VDADcheckINCOMING')
 			if (strlen($call_server_ip)<7) {$call_server_ip = $server_ip;}
 		echo "1\n" . $lead_id . '|' . $uniqueid . '|' . $callerid . '|' . $channel . '|' . $call_server_ip . "|\n";
 
-		### update the agent status to INAPPEL in vicidial_live_agents
+		### update the agent status to INCALL in vicidial_live_agents
 		$stmt = "UPDATE vicidial_live_agents set status='INCALL',last_call_time='$NOW_TIME' where user='$user' and server_ip='$server_ip';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
@@ -1021,19 +1021,19 @@ if ($ACTION == 'VDADcheckINCOMING')
 			$called_count	= trim("$row[30]");
 			}
 
-		### update the lead status to INAPPEL
+		### update the lead status to INCALL
 		$stmt = "UPDATE vicidial_list set status='INCALL', user='$user' where lead_id='$lead_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
-		### update the log status to INAPPEL
+		### update the log status to INCALL
 		$stmt = "UPDATE vicidial_log set user='$user', comments='AUTO', list_id='$list_id', status='INCALL' where lead_id='$lead_id' and uniqueid='$uniqueid';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
 		if (eregi("CLOSER",$campaign))
 			{
-			### update the vicidial_closer_log user to INAPPEL
+			### update the vicidial_closer_log user to INCALL
 			$stmt = "UPDATE vicidial_closer_log set user='$user', comments='AUTO', list_id='$list_id', status='INCALL' where lead_id='$lead_id' order by closecallid desc limit 1;";
 			if ($DB) {echo "$stmt\n";}
 			$rslt=mysql_query($stmt, $link);
@@ -1181,9 +1181,9 @@ if ($ACTION == 'VDADcheckINCOMING')
 		$rslt=mysql_query($stmt, $link);
 
 		### If APPELBK, change vicidial_callback record to INACTIVE
-		if ($dispo == 'APPELBK')
+		if (eregi("CALLBK|CBHVIEUX", $dispo))
 			{
-			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' order by callback_id desc LIMIT 1;";
+			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id';";
 				if ($format=='debug') {echo "\n<!-- $stmt -->";}
 			$rslt=mysql_query($stmt, $link);
 			}

agc_1-X/trunk/LANG_agc/agc_fr/vicidial.php

@@ -111,6 +111,7 @@
 # 60608-1453 - Added CLOSER campaign allowable in-groups limitations
 # 60609-1123 - Added add-number-to-DNC-list function and manual dial check DNC
 # 60619-1047 - Added variable filters to close security holes for login form
+# 60804-1710 - fixed scheduled CALLBK for other languages build
 #
 
 require("dbconnect.php");
@@ -156,8 +157,8 @@ if (isset($_GET["relogin"]))					{$relogin=$_GET["relogin"];}
 
 $forever_stop=0;
 
-$version = '1.1.85';
-$build = '60619-1047';
+$version = '1.1.86';
+$build = '60804-1710';
 
 if ($force_logout)
 {
@@ -177,7 +178,7 @@ $random = (rand(1000000, 9999999) + 10000000);
 
 $conf_silent_prefix		= '7';	# vicidial_conferences prefix to enter silently
 $HKuser_level			= '5';	# minimum vicidial user_level for HotKeys
-#$campaign_login_list	= '1';	# show drop-down list of campaigns at login	
+$campaign_login_list	= '1';	# show drop-down list of campaigns at login	
 $manual_dial_preview	= '1';	# allow preview lead option when manual dial
 $multi_line_comments	= '1';	# set to 1 to allow multi-line comment box
 $user_login_first		= '0';	# set to 1 to have the vicidial_user login before the phone login
@@ -847,13 +848,13 @@ else
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		$affected_rows = mysql_affected_rows($link);
-		print "<!-- vieille FILE D'ATTENTE et liste retournée par INAPPEL:   |$affected_rows| -->\n";
+		print "<!-- vieille FILE D'ATTENTE et liste retournée par INCALL:   |$affected_rows| -->\n";
 
 		$stmt="DELETE from vicidial_hopper where status IN('QUEUE','INCALL','DONE') and user ='$VD_login';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		$affected_rows = mysql_affected_rows($link);
-		print "<!-- vieille FILE D'ATTENTE et distributeur retourné par INAPPEL: |$affected_rows| -->\n";
+		print "<!-- vieille FILE D'ATTENTE et distributeur retourné par INCALL: |$affected_rows| -->\n";
 
 		$stmt="DELETE from vicidial_live_agents where user ='$VD_login';";
 		if ($DB) {echo "$stmt\n";}
@@ -1319,23 +1320,23 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	var AgainCalLSecondS = '';
 	var AgaiNCalLCID = '';
 	var CB_count_check = 60;
-	var agentcallsstatus = '<? echo $agentcallsstatus ?>'
-	var campagentstatctmax = '<? echo $campagentstatctmax ?>'
-	var campagentstatct = '0'
+	var agentcallsstatus = '<? echo $agentcallsstatus ?>';
+	var campagentstatctmax = '<? echo $campagentstatctmax ?>';
+	var campagentstatct = '0';
 	var manual_dial_in_progress = 0;
 	var auto_dial_alt_dial = 0;
 	var reselect_preview_dial = 0;
 	var reselect_alt_dial = 0;
 	var alt_dial_active = 0;
 	var mdnLisT_id = '999';
-	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>'
-	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>'
-	var agentcall_manual = '<? echo $agentcall_manual ?>'
-	var manual_dial_preview = '<? echo $manual_dial_preview ?>'
-	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var wrapup_secondes = '<? echo $wrapup_secondes ?>'
-	var wrapup_message = '<? echo $wrapup_message ?>'
+	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>';
+	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>';
+	var agentcall_manual = '<? echo $agentcall_manual ?>';
+	var manual_dial_preview = '<? echo $manual_dial_preview ?>';
+	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var wrapup_secondes = '<? echo $wrapup_secondes ?>';
+	var wrapup_message = '<? echo $wrapup_message ?>';
 	var wrapup_counter = 0;
 	var wrapup_waiting = 0;
 	var use_internal_dnc = '<? echo $use_internal_dnc ?>'
@@ -2258,7 +2259,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						var CB_calls = all_CBs_array[0];
 						var loop_ct=0;
 						var conv_start=0;
-						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">APPELBACK DATE/TIME</td><td><font class=\"log_title\">NOMBRE</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUT</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST DATE/HEURE D'APPEL</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
+						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> APPELBACK DATE/TIME</td><td><font class=\"log_title\">NOMBRE</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUT</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST DATE/HEURE D'APPEL</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
 						while (loop_ct < CB_calls)
 							{
 							loop_ct++;
@@ -2675,7 +2676,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						VDIC_web_form_address = VICIDiaL_web_form_address;
 
-						if (LeaDPreVDispO == 'APPELBK')
+						if (LeaDPreVDispO == 'CALLBK')
 							{
 							document.getElementById("CusTInfOSpaN").innerHTML = " <B> PREVIOUS APPELBACK </B>";
 							document.getElementById("CusTInfOSpaN").style.background = CusTCB_bgcolor;
@@ -2697,7 +2698,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 							document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_fr.gif\" border=0 alt=\"Client De Décrochement\"></a>";
 
-							if (campaign_recording == 'ALLAPPELS')
+							if (campaign_recording == 'ALLCALLS')
 								{all_record = 'YES';}
 
 							if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -2889,7 +2890,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 					var MDOnextResponse_array=MDOnextResponse.split("\n");
 					MDnextCID = MDOnextResponse_array[0];
-					if (MDnextCID == "APPEL NOT PLACED")
+					if (MDnextCID == " APPEL NOT PLACED")
 						{
 						alert("l'appel n'a pas été placé, il n'y avait pas une erreur:\n" + MDOnextResponse);
 						}
@@ -2902,7 +2903,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_fr.gif\" border=0 alt=\"Client De Décrochement\"></a>";
 
-						if (campaign_recording == 'ALLAPPELS')
+						if (campaign_recording == 'ALLCALLS')
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -3116,7 +3117,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						lead_dial_number = document.vicidial_form.phone_number.value;
 						document.getElementById("MainStatuSSpan").innerHTML = " Entrant: " + document.vicidial_form.phone_number.value + " UID: " + CIDcheck + " &nbsp; " + VDIC_fronter; 
 
-						if (LeaDPreVDispO == 'APPELBK')
+						if (LeaDPreVDispO == 'CALLBK')
 							{
 							document.getElementById("CusTInfOSpaN").innerHTML = " <B> PREVIOUS APPELBACK </B>";
 							document.getElementById("CusTInfOSpaN").style.background = CusTCB_bgcolor;
@@ -3212,7 +3213,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("WebFormSpan").innerHTML = "<a href=\"" + VDIC_web_form_address + web_form_vars + "\" target=\"vdcwebform\" onMouseOver=\"WebFormRefresH();\"><IMG SRC=\"../agc/images/vdc_LB_webform_fr.gif\" border=0 alt=\"Forme de Web\"></a>\n";
 
-						if (campaign_recording == 'ALLAPPELS')
+						if (campaign_recording == 'ALLCALLS')
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (CalL_ScripT_id.length > 0) )
@@ -3715,7 +3716,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 		{
 		AgentDispoing = 1;
 		var VD_statuses_ct_half = parseInt(VD_statuses_ct / 2);
-		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B>APPEL DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
+		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B> APPEL DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
 		var loop_ct = 0;
 		while (loop_ct < VD_statuses_ct)
 			{
@@ -3776,7 +3777,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 			document.getElementById("CusTInfOSpaN").innerHTML = "";
 			document.getElementById("CusTInfOSpaN").style.background = panel_bgcolor;
 
-			if ( (DispoChoice == 'APPELBK') && (scheduled_callbacks > 0) ) {showDiv('CallBackSelectBox');}
+			if ( (DispoChoice == 'CALLBK') && (scheduled_callbacks > 0) ) {showDiv('CallBackSelectBox');}
 			else
 				{
 				var xmlhttp=false;

agc_1-X/trunk/LANG_agc/agc_it/astguiclient.php

@@ -53,7 +53,8 @@
 # 60104-1347 - Added basic layout for favorites editing frame
 # 60105-1124 - Finished Favorites frame and added DB submission
 # 60112-1622 - Several formatting changes
-# 60421-1043 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60421-1357 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1103 - Added variable filters to close security holes for login form
 # 
 
 require("dbconnect.php");
@@ -87,8 +88,16 @@ $user_abb = "$user$user$user$user";
 while ( (strlen($user_abb) > 4) and ($forever_stop < 200) )
 	{$user_abb = eregi_replace("^.","",$user_abb);   $forever_stop++;}
 
-$version = '1.1.11';
-$build = '60421-1043';
+$version = '1.1.12';
+$build = '60619-1103';
+
+### security strip all non-alphanumeric characters out of the variables ###
+	$DB=ereg_replace("[^0-9a-z]","",$DB);
+	$phone_login=ereg_replace("[^0-9a-zA-Z]","",$phone_login);
+	$phone_pass=ereg_replace("[^0-9a-zA-Z]","",$phone_pass);
+	$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+	$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+
 
 if ($force_logout)
 {
@@ -363,8 +372,8 @@ else
 		while ($favorites_count > $o) 
 			{
 			$stmt="SELECT fullname,protocol from phones where extension = '$favorites[$o]' and server_ip='$server_ip';";
-			$rsltx=mysql_query($stmt, $link);
-			$rowx=mysql_fetch_row($rsltx);
+			$rslt=mysql_query($stmt, $link);
+			$rowx=mysql_fetch_row($rslt);
 			$favorites_names[$o] =	$rowx[0];
 			$favorites_listX .= "$rowx[1]/$favorites[$o],";
 			$o++;
@@ -1516,7 +1525,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (out_calls > 0)
 						{
-						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">DATE/TIME DI CHIAMATA</td><td><font class=\"log_title\">NUMERO</td><td align=right><font class=\"log_title\">LUNGHEZZA (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
+						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> DATE/TIME DI CHIAMATA</td><td><font class=\"log_title\">NUMERO</td><td align=right><font class=\"log_title\">LUNGHEZZA (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < out_calls)
 							{
 							loop_ct++;
@@ -1544,7 +1553,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (in_calls > 0)
 						{
-						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">DATE/TIME DI CHIAMATA</td><td><font class=\"log_title\">IN-NUMERO</td><td COLSPAN=2><font class=\"log_title\">CHIAMATAERID</td><td align=right><font class=\"log_title\">LUNGHEZZA</td><td><font class=\"log_title\"> </td></tr>"
+						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> DATE/TIME DI CHIAMATA</td><td><font class=\"log_title\">IN-NUMERO</td><td COLSPAN=2><font class=\"log_title\">CALLERID</td><td align=right><font class=\"log_title\">LUNGHEZZA</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < in_calls)
 							{
 							loop_ct++;

agc_1-X/trunk/LANG_agc/agc_it/vdc_db_query.php

@@ -372,7 +372,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 		$affected_rows=1;
 		$CBleadIDset=1;
 
-		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where callback_id='$callback_id';";
+		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' and status NOT IN('INACTIVE','DEAD','ARCHIVE');";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		}
@@ -493,7 +493,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 
 			$called_count++;
 
-			### flag the lead as called and change it's status to INCHIAMATA
+			### flag the lead as called and change it's status to INCALL
 			$stmt = "UPDATE vicidial_list set status='INCALL', called_since_last_reset='Y', called_count='$called_count',user='$user' where lead_id='$lead_id';";
 			if ($DB) {echo "$stmt\n";}
 			$rslt=mysql_query($stmt, $link);
@@ -603,7 +603,7 @@ if ($ACTION == 'manDiaLskip')
 	else
 	{
 		$called_count = ($called_count - 1);
-		### flag the lead as called and change it's status to INCHIAMATA
+		### flag the lead as called and change it's status to INCALL
 		$stmt = "UPDATE vicidial_list set status='$stage', called_count='$called_count',user='$user' where lead_id='$lead_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
@@ -626,7 +626,7 @@ if ($ACTION == 'manDiaLonly')
 	if ( (strlen($conf_exten)<1) || (strlen($campaign)<1) || (strlen($ext_context)<1) || (strlen($phone_number)<1) || (strlen($lead_id)<1) )
 	{
 		$channel_live=0;
-		echo "CHIAMATA NOT PLACED\n";
+		echo " CHIAMATA NOT PLACED\n";
 		echo "Conf Exten $conf_exten or campaign $campaign or ext_context $ext_context non è valido\n";
 		exit;
 	}
@@ -758,7 +758,7 @@ if ($stage == "start")
 
 	#	if ($affected_rows > 0)
 	#		{
-	#		echo "CHIAMATA_LOG Inserito: $uniqueid|$channel|$NOW_TIME";
+	#		echo "CALL_LOG Inserito: $uniqueid|$channel|$NOW_TIME";
 	#		}
 	#	else
 	#		{
@@ -979,7 +979,7 @@ if ($ACTION == 'VDADcheckINCOMING')
 			if (strlen($call_server_ip)<7) {$call_server_ip = $server_ip;}
 		echo "1\n" . $lead_id . '|' . $uniqueid . '|' . $callerid . '|' . $channel . '|' . $call_server_ip . "|\n";
 
-		### update the agent status to INCHIAMATA in vicidial_live_agents
+		### update the agent status to INCALL in vicidial_live_agents
 		$stmt = "UPDATE vicidial_live_agents set status='INCALL',last_call_time='$NOW_TIME' where user='$user' and server_ip='$server_ip';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
@@ -1021,19 +1021,19 @@ if ($ACTION == 'VDADcheckINCOMING')
 			$called_count	= trim("$row[30]");
 			}
 
-		### update the lead status to INCHIAMATA
+		### update the lead status to INCALL
 		$stmt = "UPDATE vicidial_list set status='INCALL', user='$user' where lead_id='$lead_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
-		### update the log status to INCHIAMATA
+		### update the log status to INCALL
 		$stmt = "UPDATE vicidial_log set user='$user', comments='AUTO', list_id='$list_id', status='INCALL' where lead_id='$lead_id' and uniqueid='$uniqueid';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
 		if (eregi("CLOSER",$campaign))
 			{
-			### update the vicidial_closer_log user to INCHIAMATA
+			### update the vicidial_closer_log user to INCALL
 			$stmt = "UPDATE vicidial_closer_log set user='$user', comments='AUTO', list_id='$list_id', status='INCALL' where lead_id='$lead_id' order by closecallid desc limit 1;";
 			if ($DB) {echo "$stmt\n";}
 			$rslt=mysql_query($stmt, $link);
@@ -1181,9 +1181,9 @@ if ($ACTION == 'VDADcheckINCOMING')
 		$rslt=mysql_query($stmt, $link);
 
 		### If CHIAMATABK, change vicidial_callback record to INACTIVE
-		if ($dispo == 'CHIAMATABK')
+		if (eregi("CALLBK|CBHVECCHIO", $dispo))
 			{
-			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' order by callback_id desc LIMIT 1;";
+			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id';";
 				if ($format=='debug') {echo "\n<!-- $stmt -->";}
 			$rslt=mysql_query($stmt, $link);
 			}

agc_1-X/trunk/LANG_agc/agc_it/vicidial.php

@@ -111,6 +111,7 @@
 # 60608-1453 - Added CLOSER campaign allowable in-groups limitations
 # 60609-1123 - Added add-number-to-DNC-list function and manual dial check DNC
 # 60619-1047 - Added variable filters to close security holes for login form
+# 60804-1710 - fixed scheduled CALLBK for other languages build
 #
 
 require("dbconnect.php");
@@ -156,8 +157,8 @@ if (isset($_GET["relogin"]))					{$relogin=$_GET["relogin"];}
 
 $forever_stop=0;
 
-$version = '1.1.85';
-$build = '60619-1047';
+$version = '1.1.86';
+$build = '60804-1710';
 
 if ($force_logout)
 {
@@ -1319,23 +1320,23 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	var AgainCalLSecondS = '';
 	var AgaiNCalLCID = '';
 	var CB_count_check = 60;
-	var agentcallsstatus = '<? echo $agentcallsstatus ?>'
-	var campagentstatctmax = '<? echo $campagentstatctmax ?>'
-	var campagentstatct = '0'
+	var agentcallsstatus = '<? echo $agentcallsstatus ?>';
+	var campagentstatctmax = '<? echo $campagentstatctmax ?>';
+	var campagentstatct = '0';
 	var manual_dial_in_progress = 0;
 	var auto_dial_alt_dial = 0;
 	var reselect_preview_dial = 0;
 	var reselect_alt_dial = 0;
 	var alt_dial_active = 0;
 	var mdnLisT_id = '999';
-	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>'
-	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>'
-	var agentcall_manual = '<? echo $agentcall_manual ?>'
-	var manual_dial_preview = '<? echo $manual_dial_preview ?>'
-	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var wrapup_secondi = '<? echo $wrapup_secondi ?>'
-	var wrapup_message = '<? echo $wrapup_message ?>'
+	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>';
+	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>';
+	var agentcall_manual = '<? echo $agentcall_manual ?>';
+	var manual_dial_preview = '<? echo $manual_dial_preview ?>';
+	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var wrapup_secondi = '<? echo $wrapup_secondi ?>';
+	var wrapup_message = '<? echo $wrapup_message ?>';
 	var wrapup_counter = 0;
 	var wrapup_waiting = 0;
 	var use_internal_dnc = '<? echo $use_internal_dnc ?>'
@@ -2258,7 +2259,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						var CB_calls = all_CBs_array[0];
 						var loop_ct=0;
 						var conv_start=0;
-						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">CHIAMATABACK DATE/TIME</td><td><font class=\"log_title\">NUMERO</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUS</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST DATE/TIME DI CHIAMATA</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
+						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> CHIAMATABACK DATE/TIME</td><td><font class=\"log_title\">NUMERO</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUS</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST DATE/TIME DI CHIAMATA</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
 						while (loop_ct < CB_calls)
 							{
 							loop_ct++;
@@ -2675,7 +2676,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						VDIC_web_form_address = VICIDiaL_web_form_address;
 
-						if (LeaDPreVDispO == 'CHIAMATABK')
+						if (LeaDPreVDispO == 'CALLBK')
 							{
 							document.getElementById("CusTInfOSpaN").innerHTML = " <B> PREVIOUS CHIAMATABACK </B>";
 							document.getElementById("CusTInfOSpaN").style.background = CusTCB_bgcolor;
@@ -2697,7 +2698,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 							document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_it.gif\" border=0 alt=\"Disconnetti il cliente\"></a>";
 
-							if (campaign_recording == 'ALLCHIAMATAS')
+							if (campaign_recording == 'ALLCALLS')
 								{all_record = 'YES';}
 
 							if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -2889,7 +2890,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 					var MDOnextResponse_array=MDOnextResponse.split("\n");
 					MDnextCID = MDOnextResponse_array[0];
-					if (MDnextCID == "CHIAMATA NOT PLACED")
+					if (MDnextCID == " CHIAMATA NOT PLACED")
 						{
 						alert("chiamata non effettuata, c`è un errore:\n" + MDOnextResponse);
 						}
@@ -2902,7 +2903,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_it.gif\" border=0 alt=\"Disconnetti il cliente\"></a>";
 
-						if (campaign_recording == 'ALLCHIAMATAS')
+						if (campaign_recording == 'ALLCALLS')
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -3116,7 +3117,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						lead_dial_number = document.vicidial_form.phone_number.value;
 						document.getElementById("MainStatuSSpan").innerHTML = " In entrata: " + document.vicidial_form.phone_number.value + " UID: " + CIDcheck + " &nbsp; " + VDIC_fronter; 
 
-						if (LeaDPreVDispO == 'CHIAMATABK')
+						if (LeaDPreVDispO == 'CALLBK')
 							{
 							document.getElementById("CusTInfOSpaN").innerHTML = " <B> PREVIOUS CHIAMATABACK </B>";
 							document.getElementById("CusTInfOSpaN").style.background = CusTCB_bgcolor;
@@ -3212,7 +3213,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("WebFormSpan").innerHTML = "<a href=\"" + VDIC_web_form_address + web_form_vars + "\" target=\"vdcwebform\" onMouseOver=\"WebFormRefresH();\"><IMG SRC=\"../agc/images/vdc_LB_webform_it.gif\" border=0 alt=\"Interfacccia Web\"></a>\n";
 
-						if (campaign_recording == 'ALLCHIAMATAS')
+						if (campaign_recording == 'ALLCALLS')
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (CalL_ScripT_id.length > 0) )
@@ -3715,7 +3716,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 		{
 		AgentDispoing = 1;
 		var VD_statuses_ct_half = parseInt(VD_statuses_ct / 2);
-		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B>CHIAMATA DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
+		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B> CHIAMATA DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
 		var loop_ct = 0;
 		while (loop_ct < VD_statuses_ct)
 			{
@@ -3776,7 +3777,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 			document.getElementById("CusTInfOSpaN").innerHTML = "";
 			document.getElementById("CusTInfOSpaN").style.background = panel_bgcolor;
 
-			if ( (DispoChoice == 'CHIAMATABK') && (scheduled_callbacks > 0) ) {showDiv('CallBackSelectBox');}
+			if ( (DispoChoice == 'CALLBK') && (scheduled_callbacks > 0) ) {showDiv('CallBackSelectBox');}
 			else
 				{
 				var xmlhttp=false;

agc_1-X/trunk/LANG_agc/agc_pt/astguiclient.php

@@ -53,7 +53,8 @@
 # 60104-1347 - Added basic layout for favorites editing frame
 # 60105-1124 - Finished Favorites frame and added DB submission
 # 60112-1622 - Several formatting changes
-# 60421-1043 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60421-1357 - check GET/POST vars lines with isset to not trigger PHP NOTICES
+# 60619-1103 - Added variable filters to close security holes for login form
 # 
 
 require("dbconnect.php");
@@ -87,8 +88,16 @@ $user_abb = "$user$user$user$user";
 while ( (strlen($user_abb) > 4) and ($forever_stop < 200) )
 	{$user_abb = eregi_replace("^.","",$user_abb);   $forever_stop++;}
 
-$version = '1.1.11';
-$build = '60421-1043';
+$version = '1.1.12';
+$build = '60619-1103';
+
+### security strip all non-alphanumeric characters out of the variables ###
+	$DB=ereg_replace("[^0-9a-z]","",$DB);
+	$phone_login=ereg_replace("[^0-9a-zA-Z]","",$phone_login);
+	$phone_pass=ereg_replace("[^0-9a-zA-Z]","",$phone_pass);
+	$user=ereg_replace("[^0-9a-zA-Z]","",$user);
+	$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
+
 
 if ($force_logout)
 {
@@ -363,8 +372,8 @@ else
 		while ($favorites_count > $o) 
 			{
 			$stmt="SELECT fullname,protocol from phones where extension = '$favorites[$o]' and server_ip='$server_ip';";
-			$rsltx=mysql_query($stmt, $link);
-			$rowx=mysql_fetch_row($rsltx);
+			$rslt=mysql_query($stmt, $link);
+			$rowx=mysql_fetch_row($rslt);
 			$favorites_names[$o] =	$rowx[0];
 			$favorites_listX .= "$rowx[1]/$favorites[$o],";
 			$o++;
@@ -1516,7 +1525,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (out_calls > 0)
 						{
-						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">DATE/TIME DA CHAMADA</td><td><font class=\"log_title\">NÚMERO</td><td align=right><font class=\"log_title\">COMPRIMENTO (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
+						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> DATE/TIME DA CHAMADA</td><td><font class=\"log_title\">NÚMERO</td><td align=right><font class=\"log_title\">COMPRIMENTO (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < out_calls)
 							{
 							loop_ct++;
@@ -1544,7 +1553,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (in_calls > 0)
 						{
-						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">DATE/TIME DA CHAMADA</td><td><font class=\"log_title\">IN-NÚMERO</td><td COLSPAN=2><font class=\"log_title\">CHAMADAERID</td><td align=right><font class=\"log_title\">COMPRIMENTO</td><td><font class=\"log_title\"> </td></tr>"
+						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> DATE/TIME DA CHAMADA</td><td><font class=\"log_title\">IN-NÚMERO</td><td COLSPAN=2><font class=\"log_title\">CALLERID</td><td align=right><font class=\"log_title\">COMPRIMENTO</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < in_calls)
 							{
 							loop_ct++;

agc_1-X/trunk/LANG_agc/agc_pt/vdc_db_query.php

@@ -372,7 +372,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 		$affected_rows=1;
 		$CBleadIDset=1;
 
-		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where callback_id='$callback_id';";
+		$stmt = "UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' and status NOT IN('INACTIVE','DEAD','ARCHIVE');";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		}
@@ -493,7 +493,7 @@ if ($ACTION == 'manDiaLnextCaLL')
 
 			$called_count++;
 
-			### flag the lead as called and change it's status to INCHAMADA
+			### flag the lead as called and change it's status to INCALL
 			$stmt = "UPDATE vicidial_list set status='INCALL', called_since_last_reset='Y', called_count='$called_count',user='$user' where lead_id='$lead_id';";
 			if ($DB) {echo "$stmt\n";}
 			$rslt=mysql_query($stmt, $link);
@@ -603,7 +603,7 @@ if ($ACTION == 'manDiaLskip')
 	else
 	{
 		$called_count = ($called_count - 1);
-		### flag the lead as called and change it's status to INCHAMADA
+		### flag the lead as called and change it's status to INCALL
 		$stmt = "UPDATE vicidial_list set status='$stage', called_count='$called_count',user='$user' where lead_id='$lead_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
@@ -626,7 +626,7 @@ if ($ACTION == 'manDiaLonly')
 	if ( (strlen($conf_exten)<1) || (strlen($campaign)<1) || (strlen($ext_context)<1) || (strlen($phone_number)<1) || (strlen($lead_id)<1) )
 	{
 		$channel_live=0;
-		echo "CHAMADA NOT PLACED\n";
+		echo " CHAMADA NOT PLACED\n";
 		echo "Conf Exten $conf_exten or campaign $campaign or ext_context $ext_context é inválido\n";
 		exit;
 	}
@@ -758,7 +758,7 @@ if ($stage == "start")
 
 	#	if ($affected_rows > 0)
 	#		{
-	#		echo "CHAMADA_LOG Introduzido: $uniqueid|$channel|$NOW_TIME";
+	#		echo "CALL_LOG Introduzido: $uniqueid|$channel|$NOW_TIME";
 	#		}
 	#	else
 	#		{
@@ -979,7 +979,7 @@ if ($ACTION == 'VDADcheckINCOMING')
 			if (strlen($call_server_ip)<7) {$call_server_ip = $server_ip;}
 		echo "1\n" . $lead_id . '|' . $uniqueid . '|' . $callerid . '|' . $channel . '|' . $call_server_ip . "|\n";
 
-		### update the agent status to INCHAMADA in vicidial_live_agents
+		### update the agent status to INCALL in vicidial_live_agents
 		$stmt = "UPDATE vicidial_live_agents set status='INCALL',last_call_time='$NOW_TIME' where user='$user' and server_ip='$server_ip';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
@@ -1021,19 +1021,19 @@ if ($ACTION == 'VDADcheckINCOMING')
 			$called_count	= trim("$row[30]");
 			}
 
-		### update the lead status to INCHAMADA
+		### update the lead status to INCALL
 		$stmt = "UPDATE vicidial_list set status='INCALL', user='$user' where lead_id='$lead_id';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
-		### update the log status to INCHAMADA
+		### update the log status to INCALL
 		$stmt = "UPDATE vicidial_log set user='$user', comments='AUTO', list_id='$list_id', status='INCALL' where lead_id='$lead_id' and uniqueid='$uniqueid';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 
 		if (eregi("CLOSER",$campaign))
 			{
-			### update the vicidial_closer_log user to INCHAMADA
+			### update the vicidial_closer_log user to INCALL
 			$stmt = "UPDATE vicidial_closer_log set user='$user', comments='AUTO', list_id='$list_id', status='INCALL' where lead_id='$lead_id' order by closecallid desc limit 1;";
 			if ($DB) {echo "$stmt\n";}
 			$rslt=mysql_query($stmt, $link);
@@ -1181,9 +1181,9 @@ if ($ACTION == 'VDADcheckINCOMING')
 		$rslt=mysql_query($stmt, $link);
 
 		### If CHAMADABK, change vicidial_callback record to INACTIVE
-		if ($dispo == 'CHAMADABK')
+		if (eregi("CALLBK|CBHVELHO", $dispo))
 			{
-			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id' order by callback_id desc LIMIT 1;";
+			$stmt="UPDATE vicidial_callbacks set status='INACTIVE' where lead_id='$lead_id';";
 				if ($format=='debug') {echo "\n<!-- $stmt -->";}
 			$rslt=mysql_query($stmt, $link);
 			}

agc_1-X/trunk/LANG_agc/agc_pt/vicidial.php

@@ -111,6 +111,7 @@
 # 60608-1453 - Added CLOSER campaign allowable in-groups limitations
 # 60609-1123 - Added add-number-to-DNC-list function and manual dial check DNC
 # 60619-1047 - Added variable filters to close security holes for login form
+# 60804-1710 - fixed scheduled CALLBK for other languages build
 #
 
 require("dbconnect.php");
@@ -156,8 +157,8 @@ if (isset($_GET["relogin"]))					{$relogin=$_GET["relogin"];}
 
 $forever_stop=0;
 
-$version = '1.1.85';
-$build = '60619-1047';
+$version = '1.1.86';
+$build = '60804-1710';
 
 if ($force_logout)
 {
@@ -177,7 +178,7 @@ $random = (rand(1000000, 9999999) + 10000000);
 
 $conf_silent_prefix		= '7';	# vicidial_conferences prefix to enter silently
 $HKuser_level			= '5';	# minimum vicidial user_level for HotKeys
-#$campaign_login_list	= '1';	# show drop-down list of campaigns at login	
+$campaign_login_list	= '1';	# show drop-down list of campaigns at login	
 $manual_dial_preview	= '1';	# allow preview lead option when manual dial
 $multi_line_comments	= '1';	# set to 1 to allow multi-line comment box
 $user_login_first		= '0';	# set to 1 to have the vicidial_user login before the phone login
@@ -847,13 +848,13 @@ else
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		$affected_rows = mysql_affected_rows($link);
-		print "<!-- FILA velha e lista reverted INCHAMADA:   |$affected_rows| -->\n";
+		print "<!-- FILA velha e lista reverted INCALL:   |$affected_rows| -->\n";
 
 		$stmt="DELETE from vicidial_hopper where status IN('QUEUE','INCALL','DONE') and user ='$VD_login';";
 		if ($DB) {echo "$stmt\n";}
 		$rslt=mysql_query($stmt, $link);
 		$affected_rows = mysql_affected_rows($link);
-		print "<!-- FILA velha e funil reverted INCHAMADA: |$affected_rows| -->\n";
+		print "<!-- FILA velha e funil reverted INCALL: |$affected_rows| -->\n";
 
 		$stmt="DELETE from vicidial_live_agents where user ='$VD_login';";
 		if ($DB) {echo "$stmt\n";}
@@ -1319,23 +1320,23 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	var AgainCalLSecondS = '';
 	var AgaiNCalLCID = '';
 	var CB_count_check = 60;
-	var agentcallsstatus = '<? echo $agentcallsstatus ?>'
-	var campagentstatctmax = '<? echo $campagentstatctmax ?>'
-	var campagentstatct = '0'
+	var agentcallsstatus = '<? echo $agentcallsstatus ?>';
+	var campagentstatctmax = '<? echo $campagentstatctmax ?>';
+	var campagentstatct = '0';
 	var manual_dial_in_progress = 0;
 	var auto_dial_alt_dial = 0;
 	var reselect_preview_dial = 0;
 	var reselect_alt_dial = 0;
 	var alt_dial_active = 0;
 	var mdnLisT_id = '999';
-	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>'
-	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>'
-	var agentcall_manual = '<? echo $agentcall_manual ?>'
-	var manual_dial_preview = '<? echo $manual_dial_preview ?>'
-	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var wrapup_segundos = '<? echo $wrapup_segundos ?>'
-	var wrapup_message = '<? echo $wrapup_message ?>'
+	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>';
+	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>';
+	var agentcall_manual = '<? echo $agentcall_manual ?>';
+	var manual_dial_preview = '<? echo $manual_dial_preview ?>';
+	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var wrapup_segundos = '<? echo $wrapup_segundos ?>';
+	var wrapup_message = '<? echo $wrapup_message ?>';
 	var wrapup_counter = 0;
 	var wrapup_waiting = 0;
 	var use_internal_dnc = '<? echo $use_internal_dnc ?>'
@@ -2258,7 +2259,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						var CB_calls = all_CBs_array[0];
 						var loop_ct=0;
 						var conv_start=0;
-						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">CHAMADABACK DATE/TIME</td><td><font class=\"log_title\">NÚMERO</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUS</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST DATE/TIME DA CHAMADA</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
+						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> CHAMADABACK DATE/TIME</td><td><font class=\"log_title\">NÚMERO</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUS</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST DATE/TIME DA CHAMADA</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
 						while (loop_ct < CB_calls)
 							{
 							loop_ct++;
@@ -2675,7 +2676,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						VDIC_web_form_address = VICIDiaL_web_form_address;
 
-						if (LeaDPreVDispO == 'CHAMADABK')
+						if (LeaDPreVDispO == 'CALLBK')
 							{
 							document.getElementById("CusTInfOSpaN").innerHTML = " <B> PREVIOUS CHAMADABACK </B>";
 							document.getElementById("CusTInfOSpaN").style.background = CusTCB_bgcolor;
@@ -2697,7 +2698,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 							document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_pt.gif\" border=0 alt=\"Cliente Do Hangup\"></a>";
 
-							if (campaign_recording == 'ALLCHAMADAS')
+							if (campaign_recording == 'ALLCALLS')
 								{all_record = 'YES';}
 
 							if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -2889,7 +2890,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 					var MDOnextResponse_array=MDOnextResponse.split("\n");
 					MDnextCID = MDOnextResponse_array[0];
-					if (MDnextCID == "CHAMADA NOT PLACED")
+					if (MDnextCID == " CHAMADA NOT PLACED")
 						{
 						alert("a chamada não foi colocada, não havia um erro:\n" + MDOnextResponse);
 						}
@@ -2902,7 +2903,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("HangupControl").innerHTML = "<a href=\"#\" onclick=\"dialedcall_send_hangup();\"><IMG SRC=\"../agc/images/vdc_LB_hangupcustomer_pt.gif\" border=0 alt=\"Cliente Do Hangup\"></a>";
 
-						if (campaign_recording == 'ALLCHAMADAS')
+						if (campaign_recording == 'ALLCALLS')
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (campaign_script.length > 0) )
@@ -3116,7 +3117,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						lead_dial_number = document.vicidial_form.phone_number.value;
 						document.getElementById("MainStatuSSpan").innerHTML = " Entrante: " + document.vicidial_form.phone_number.value + " UID: " + CIDcheck + " &nbsp; " + VDIC_fronter; 
 
-						if (LeaDPreVDispO == 'CHAMADABK')
+						if (LeaDPreVDispO == 'CALLBK')
 							{
 							document.getElementById("CusTInfOSpaN").innerHTML = " <B> PREVIOUS CHAMADABACK </B>";
 							document.getElementById("CusTInfOSpaN").style.background = CusTCB_bgcolor;
@@ -3212,7 +3213,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 						document.getElementById("WebFormSpan").innerHTML = "<a href=\"" + VDIC_web_form_address + web_form_vars + "\" target=\"vdcwebform\" onMouseOver=\"WebFormRefresH();\"><IMG SRC=\"../agc/images/vdc_LB_webform_pt.gif\" border=0 alt=\"Formulário Da Correia fotorreceptora\"></a>\n";
 
-						if (campaign_recording == 'ALLCHAMADAS')
+						if (campaign_recording == 'ALLCALLS')
 							{all_record = 'YES';}
 
 						if ( (view_scripts == 1) && (CalL_ScripT_id.length > 0) )
@@ -3715,7 +3716,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 		{
 		AgentDispoing = 1;
 		var VD_statuses_ct_half = parseInt(VD_statuses_ct / 2);
-		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B>CHAMADA DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
+		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B> CHAMADA DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
 		var loop_ct = 0;
 		while (loop_ct < VD_statuses_ct)
 			{
@@ -3776,7 +3777,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 			document.getElementById("CusTInfOSpaN").innerHTML = "";
 			document.getElementById("CusTInfOSpaN").style.background = panel_bgcolor;
 
-			if ( (DispoChoice == 'CHAMADABK') && (scheduled_callbacks > 0) ) {showDiv('CallBackSelectBox');}
+			if ( (DispoChoice == 'CALLBK') && (scheduled_callbacks > 0) ) {showDiv('CallBackSelectBox');}
 			else
 				{
 				var xmlhttp=false;

agc_1-X/trunk/agc/astguiclient.php

@@ -1525,7 +1525,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (out_calls > 0)
 						{
-						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">CALL DATE/TIME</td><td><font class=\"log_title\">NUMBER</td><td align=right><font class=\"log_title\">LENGTH (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
+						var out_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> CALL DATE/TIME</td><td><font class=\"log_title\">NUMBER</td><td align=right><font class=\"log_title\">LENGTH (M:SS)</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < out_calls)
 							{
 							loop_ct++;
@@ -1553,7 +1553,7 @@ if ($enable_fast_refresh < 1) {echo "var refresh_interval = 1000;\n";}
 					var conv_start=0;
 					if (in_calls > 0)
 						{
-						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">CALL DATE/TIME</td><td><font class=\"log_title\">IN-NUMBER</td><td COLSPAN=2><font class=\"log_title\">CALLERID</td><td align=right><font class=\"log_title\">LENGTH</td><td><font class=\"log_title\"> </td></tr>"
+						var in_log_HTML = "<table width=580><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> CALL DATE/TIME</td><td><font class=\"log_title\">IN-NUMBER</td><td COLSPAN=2><font class=\"log_title\">CALLERID</td><td align=right><font class=\"log_title\">LENGTH</td><td><font class=\"log_title\"> </td></tr>"
 						while (loop_ct < in_calls)
 							{
 							loop_ct++;

agc_1-X/trunk/agc/vdc_db_query.php

@@ -626,7 +626,7 @@ if ($ACTION == 'manDiaLonly')
 	if ( (strlen($conf_exten)<1) || (strlen($campaign)<1) || (strlen($ext_context)<1) || (strlen($phone_number)<1) || (strlen($lead_id)<1) )
 	{
 		$channel_live=0;
-		echo "CALL NOT PLACED\n";
+		echo " CALL NOT PLACED\n";
 		echo "Conf Exten $conf_exten or campaign $campaign or ext_context $ext_context is not valid\n";
 		exit;
 	}

agc_1-X/trunk/agc/vicidial.php

@@ -111,6 +111,7 @@
 # 60608-1453 - Added CLOSER campaign allowable in-groups limitations
 # 60609-1123 - Added add-number-to-DNC-list function and manual dial check DNC
 # 60619-1047 - Added variable filters to close security holes for login form
+# 60804-1710 - fixed scheduled CALLBK for other languages build
 #
 
 require("dbconnect.php");
@@ -156,8 +157,8 @@ if (isset($_GET["relogin"]))					{$relogin=$_GET["relogin"];}
 
 $forever_stop=0;
 
-$version = '1.1.85';
-$build = '60619-1047';
+$version = '1.1.86';
+$build = '60804-1710';
 
 if ($force_logout)
 {
@@ -1319,23 +1320,23 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 	var AgainCalLSecondS = '';
 	var AgaiNCalLCID = '';
 	var CB_count_check = 60;
-	var agentcallsstatus = '<? echo $agentcallsstatus ?>'
-	var campagentstatctmax = '<? echo $campagentstatctmax ?>'
-	var campagentstatct = '0'
+	var agentcallsstatus = '<? echo $agentcallsstatus ?>';
+	var campagentstatctmax = '<? echo $campagentstatctmax ?>';
+	var campagentstatct = '0';
 	var manual_dial_in_progress = 0;
 	var auto_dial_alt_dial = 0;
 	var reselect_preview_dial = 0;
 	var reselect_alt_dial = 0;
 	var alt_dial_active = 0;
 	var mdnLisT_id = '999';
-	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>'
-	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>'
-	var agentcall_manual = '<? echo $agentcall_manual ?>'
-	var manual_dial_preview = '<? echo $manual_dial_preview ?>'
-	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>'
-	var wrapup_seconds = '<? echo $wrapup_seconds ?>'
-	var wrapup_message = '<? echo $wrapup_message ?>'
+	var VU_vicidial_transfers = '<? echo $VU_vicidial_transfers ?>';
+	var agentonly_callbacks = '<? echo $agentonly_callbacks ?>';
+	var agentcall_manual = '<? echo $agentcall_manual ?>';
+	var manual_dial_preview = '<? echo $manual_dial_preview ?>';
+	var starting_alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var alt_phone_dialing = '<? echo $alt_phone_dialing ?>';
+	var wrapup_seconds = '<? echo $wrapup_seconds ?>';
+	var wrapup_message = '<? echo $wrapup_message ?>';
 	var wrapup_counter = 0;
 	var wrapup_waiting = 0;
 	var use_internal_dnc = '<? echo $use_internal_dnc ?>'
@@ -2258,7 +2259,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 						var CB_calls = all_CBs_array[0];
 						var loop_ct=0;
 						var conv_start=0;
-						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\">CALLBACK DATE/TIME</td><td><font class=\"log_title\">NUMBER</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUS</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST CALL DATE/TIME</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
+						var CB_HTML = "<table width=610><tr bgcolor=#E6E6E6><td><font class=\"log_title\">#</td><td><font class=\"log_title\"> CALLBACK DATE/TIME</td><td><font class=\"log_title\">NUMBER</td><td><font class=\"log_title\">NAME</td><td><font class=\"log_title\">STATUS</td><td align=right><font class=\"log_title\">CAMPAIGN</td><td><font class=\"log_title\">LAST CALL DATE/TIME</td><td align=left><font class=\"log_title\"> COMMENTS</td></tr>"
 						while (loop_ct < CB_calls)
 							{
 							loop_ct++;
@@ -2889,7 +2890,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 
 					var MDOnextResponse_array=MDOnextResponse.split("\n");
 					MDnextCID = MDOnextResponse_array[0];
-					if (MDnextCID == "CALL NOT PLACED")
+					if (MDnextCID == " CALL NOT PLACED")
 						{
 						alert("call was not placed, there was an error:\n" + MDOnextResponse);
 						}
@@ -3715,7 +3716,7 @@ if ($enable_fast_refresh < 1) {echo "\tvar refresh_interval = 1000;\n";}
 		{
 		AgentDispoing = 1;
 		var VD_statuses_ct_half = parseInt(VD_statuses_ct / 2);
-		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B>CALL DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
+		var dispo_HTML = "<table cellpadding=5 cellspacing=5 width=500><tr><td colspan=2><B> CALL DISPOSITION</B></td></tr><tr><td bgcolor=\"#99FF99\" height=300 width=240 valign=top><font class=\"log_text\"><span id=DispoSelectA>";
 		var loop_ct = 0;
 		while (loop_ct < VD_statuses_ct)
 			{

agc_1-X/trunk/translations/br_language.txt

@@ -141,7 +141,7 @@ OUTBOUND CALLS|CHAMADAS SAINTES|
 INBOUND CALLS|CHAMADAS ENTRANTES|
 Refresh rate|Atualizar a taxa|
 MANUAL DIAL|DISCAGEM MANUAL|
-CALL DATE/TIME|DATA/HORA DA CHAMADA|
+CALL DATE\/TIME|DATA/HORA DA CHAMADA|
 LOCAL HANGUP|DESLIGAR LOCAL|
 PARKED CALLS|CHAMADAS EM ESPERA|
 PARKED BY|EM ESPERA POR|
@@ -335,7 +335,7 @@ NUMBER|NUMERO|
 LENGTH|COMPRIMENTO|
 CALLERID|CALLERID|
 CallerID|CallerID|
-CALL|CHAMADA|
+ CALL| CHAMADA|
 PICKUP|CAPTURAR|
 CONFERENCE|CONFERENCIA|
 Refresh|Atualizar|

agc_1-X/trunk/translations/de_language.txt

@@ -142,7 +142,7 @@ OUTBOUND CALLS|OUTBOUND ANRUFE|
 INBOUND CALLS|INBOUND ANRUFE|
 Refresh rate|Erneuern Sie Rate|
 MANUAL DIAL|MANUELLER VORWAHLKNOPF|
-CALL DATE/TIME|ANRUFDATE/TIME|
+CALL DATE\/TIME|ANRUFDATE/TIME|
 LOCAL HANGUP|LOKALER HÄNGEZUSTAND|
 PARKED CALLS|GEPARKTE ANRUFE|
 PARKED BY|VORBEI GEPARKT|
@@ -338,7 +338,7 @@ NUMBER|ZAHL|
 LENGTH|LÄNGE|
 CALLERID|CALLERID|
 CallerID|CallerID|
-CALL|ANRUF|
+ CALL| ANRUF|
 PICKUP|AUFNAHME|
 CONFERENCE|KONFERENZ|
 Refresh|ErneuernSie|

agc_1-X/trunk/translations/el_language.txt

@@ -142,7 +142,7 @@ OUTBOUND CALLS|ΕΞΕΡΧΟΜΕΝΕΣ ΚΛΗΣΕΙΣ|
 INBOUND CALLS|ΕΙΣΕΡΧΟΜΕΝΕΣ ΚΛΗΣΕΙΣ|
 Refresh rate|Ρυθμός ανανέωσης|
 MANUAL DIAL|ΧΕΙΡ.ΚΛΗΣΗ|
-CALL DATE/TIME|ΗΜΕΡΟΜΗΝΙΑ/ΧΡΟΝΟΣ ΚΛΗΣΗΣ|
+CALL DATE\/TIME|ΗΜΕΡΟΜΗΝΙΑ/ΧΡΟΝΟΣ ΚΛΗΣΗΣ|
 LOCAL HANGUP|ΤΟΠΙΚΟ ΚΛΕΙΣΙΜΟ ΤΗΛΕΦΩΝΟΥ|
 PARKED CALLS|ΣΤΑΘΜ.ΚΛΗΣΕΙΣ|
 PARKED BY|ΣΤΑΘΜΕΥΜΕΝΕΣ ΑΠΟ|
@@ -336,7 +336,7 @@ NUMBER|ΑΡΙΘΜΟΣ|
 LENGTH|ΜΗΚΟΣ|
 CALLERID|CALLERID|
 CallerID|CallerID|
-CALL|ΚΛΗΣΗ|
+ CALL| ΚΛΗΣΗ|
 PICKUP|ΕΠΑΝΑΛΕΙΨΗ|
 CONFERENCE|ΣΥΝΔΙΑΣΚΕΨΗ|
 Refresh|Ανανέωση|

agc_1-X/trunk/translations/es_language.txt

@@ -141,7 +141,7 @@ OUTBOUND CALLS|LLAMADAS SALIENTES|
 INBOUND CALLS|LLAMADAS ENTRANTES|
 Refresh rate|Actualizar la tarifa|
 MANUAL DIAL|MARCADO MANUAL|
-CALL DATE/TIME|FECHA/HORA DE LA LLAMADA|
+CALL DATE\/TIME|FECHA/HORA DE LA LLAMADA|
 LOCAL HANGUP|Colgar Local|
 PARKED CALLS|LLAMADAS  APARCADAS|
 PARKED BY|APARCAR POR|
@@ -338,7 +338,7 @@ NUMBER|NÚMERO|
 LENGTH|LONGITUD|
 CALLERID|LLAMADORID|
 CallerID|LlamadorID|
-CALL|LLAMADA|
+ CALL| LLAMADA|
 PICKUP|CAPTURAR|
 CONFERENCE|CONFERENCIA|
 Refresh|Recarga|

agc_1-X/trunk/translations/fr_language.txt

@@ -141,7 +141,7 @@ OUTBOUND CALLS|APPELS EN PARTANCE|
 INBOUND CALLS|APPELS D'ARRIVÉE|
 Refresh rate|La vitesse de régénération|
 MANUAL DIAL|CADRAN MANUEL|
-CALL DATE/TIME|DATE/HEURE D'APPEL|
+CALL DATE\/TIME|DATE/HEURE D'APPEL|
 LOCAL HANGUP|DÉCROCHEMENT LOCAL|
 PARKED CALLS|APPELS GARÉS|
 PARKED BY|GARÉ PRÈS|
@@ -338,7 +338,7 @@ NUMBER|NOMBRE|
 LENGTH|LONGUEUR|
 CALLERID|CALLERID|
 CallerID|CallerID|
-CALL|APPEL|
+ CALL| APPEL|
 PICKUP|COLLECTE|
 CONFERENCE|CONFÉRENCE|
 Refresh|Régénérez|

agc_1-X/trunk/translations/it_language.txt

@@ -141,7 +141,7 @@ OUTBOUND CALLS|CHIAMATE OUTBOUND|
 INBOUND CALLS|CHIAMATE INBOUND|
 Refresh rate|Aggiorna i tempi|
 MANUAL DIAL|Chiamata Manuale|
-CALL DATE/TIME|DATE/TIME DI CHIAMATA|
+CALL DATE\/TIME|DATE/TIME DI CHIAMATA|
 LOCAL HANGUP|DISCONNETTI LOCALI|
 PARKED CALLS|CHIAMATE PARCHEGGIATE|
 PARKED BY|PARCHEGGIATO DA|
@@ -338,7 +338,7 @@ NUMBER|NUMERO|
 LENGTH|LUNGHEZZA|
 CALLERID|CALLERID|
 CallerID|CallerID|
-CALL|CHIAMATA|
+ CALL| CHIAMATA|
 PICKUP|RIPRENDI|
 CONFERENCE|CONFERENZA|
 Refresh|Aggiorna|

agc_1-X/trunk/translations/pt_language.txt

@@ -141,7 +141,7 @@ OUTBOUND CALLS|CHAMADAS OUTBOUND |
 INBOUND CALLS|CHAMADAS INBOUND|
 Refresh rate|Refresque a taxa|
 MANUAL DIAL|SELETOR MANUAL|
-CALL DATE/TIME|DATE/TIME DA CHAMADA|
+CALL DATE\/TIME|DATE/TIME DA CHAMADA|
 LOCAL HANGUP|HANGUP LOCAL|
 PARKED CALLS|CHAMADAS ESTACIONADAS|
 PARKED BY|ESTACIONADO PERTO|
@@ -338,7 +338,7 @@ NUMBER|NÚMERO|
 LENGTH|COMPRIMENTO|
 CALLERID|CALLERID|
 CallerID|CallerID|
-CALL|CHAMADA|
+ CALL| CHAMADA|
 PICKUP|COLETOR|
 CONFERENCE|CONFERÊNCIA|
 Refresh|Refresque|