From c0efa33ed1ad3b0b1a7f50888803d650541ee93c Mon Sep 17 00:00:00 2001 From: mattf Date: Sat, 27 May 2017 00:50:43 +0000 Subject: [PATCH] Fixed unfilter variables issue #1015 git-svn-id: svn://192.168.202.10@2758 3d104415-ff17-0410-8863-d5cf3c621b8a --- agc_2-X/trunk/www/vicidial/vicidial_sales_viewer.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/agc_2-X/trunk/www/vicidial/vicidial_sales_viewer.php b/agc_2-X/trunk/www/vicidial/vicidial_sales_viewer.php index 40d426dd..21c5fa3d 100644 --- a/agc_2-X/trunk/www/vicidial/vicidial_sales_viewer.php +++ b/agc_2-X/trunk/www/vicidial/vicidial_sales_viewer.php @@ -14,6 +14,7 @@ # 130901-0832 - Changed to mysqli PHP functions # 141007-2147 - Finalized adding QXZ translation to all admin files # 170217-1213 - Fixed non-latin auth issue #995 +# 170526-2044 - Fixed unfilter variables issue #1015 # if (isset($_GET["dcampaign"])) {$dcampaign=$_GET["dcampaign"];} @@ -64,6 +65,8 @@ else $PHP_AUTH_USER = preg_replace("/'|\"|\\\\|;/","",$PHP_AUTH_USER); } $dcampaign = preg_replace('/[^0-9a-zA-Z]/', '', $dcampaign); +$list_ids = preg_replace('/[^\,0-9a-zA-Z]/', '', $list_ids); +$forc = preg_replace('/[^0-9a-zA-Z]/', '', $forc); $auth=0; $reports_auth=0;