ViciDial/ViciDialSVN
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix for security issue, removed absolute path attachments for agc/dispo_send_email.php script, now attachments must be in "agc/attachments/" web directory

Browse Source 
git-svn-id: svn://192.168.202.10@3501 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2021-08-23 20:36:36 +00:00
parent 628e4b0870
commit c97388f371
4 changed files with 674 additions and 375 deletions
Download Patch File Download Diff File Expand all files Collapse all files
agc_2-X/trunk/www/agc/options-example.php
+2
View File
@@ -21,6 +21,7 @@
# 200827-1230 - Added alt_display_enabled option
# 210616-0959 - Added CORS support
# 210705-1624 - Added user_pass_webform and phone_login_webform options
# 210823-1633 - Added email_attachment_path option for dispo_send_email.php script
#
$conf_silent_prefix = '5'; # vicidial_conferences prefix to enter silently and muted for recording
@@ -64,6 +65,7 @@ $webphone_call_seconds = '0'; # set to 1 or higher to have the agent phone(if se
$user_pass_webform = '0'; # set to 1 or 2 to return to default of including the 'user'(1) and 'pass'(2) by default in webform URLs
$phone_login_webform = '0'; # set to 1 or 2 to return to default of including the 'phone_login'(1) and 'phone_pass'(2) by default in webform URLs
$alt_display_enabled = '0'; # set to 1 to allow the alt_display.php script to be used
$email_attachment_path = './attachments'; # set to the absolute path from where all of the dispo_send_email.php script attachemnts will be located
$TEST_all_statuses = '0'; # TEST variable allows all statuses in dispo screen