ViciDial/ViciDialSVN
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

2006-04-21_snapshot

Browse Source 
git-svn-id: svn://192.168.202.10@5 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2006-07-07 15:17:45 +00:00
parent 4862328b6e
commit dcbe8f2faa
54 changed files with 2283 additions and 1461 deletions
Download Patch File Download Diff File Expand all files Collapse all files
agc_1-X/trunk/agc/voicemail_check.php
+23 -19
View File
@@ -17,33 +17,37 @@
###
# changes
# 50422-1147 First build of script
# 50503-1241 added session_name checking for extra security
# 50711-1201 removed HTTP authentication in favor of user/pass vars
# 50422-1147 - First build of script
# 50503-1241 - added session_name checking for extra security
# 50711-1201 - removed HTTP authentication in favor of user/pass vars
# 60421-1147 - check GET/POST vars lines with isset to not trigger PHP NOTICES
#
require("dbconnect.php");
#require_once("htglobalize.php");
### If you have globals turned off uncomment these lines
$user=$_GET["user"]; if (!$user) {$user=$_POST["user"];}
$pass=$_GET["pass"]; if (!$pass) {$pass=$_POST["pass"];}
$server_ip=$_GET["server_ip"]; if (!$server_ip) {$server_ip=$_POST["server_ip"];}
$session_name=$_GET["session_name"]; if (!$session_name) {$session_name=$_POST["session_name"];}
$format=$_GET["format"]; if (!$format) {$format=$_POST["format"];}
$vmail_box=$_GET["vmail_box"]; if (!$vmail_box) {$vmail_box=$_POST["vmail_box"];}
if (isset($_GET["user"])) {$user=$_GET["user"];}
elseif (isset($_POST["user"])) {$user=$_POST["user"];}
if (isset($_GET["pass"])) {$pass=$_GET["pass"];}
elseif (isset($_POST["pass"])) {$pass=$_POST["pass"];}
if (isset($_GET["server_ip"])) {$server_ip=$_GET["server_ip"];}
elseif (isset($_POST["server_ip"])) {$server_ip=$_POST["server_ip"];}
if (isset($_GET["session_name"])) {$session_name=$_GET["session_name"];}
elseif (isset($_POST["session_name"])) {$session_name=$_POST["session_name"];}
if (isset($_GET["format"])) {$format=$_GET["format"];}
elseif (isset($_POST["format"])) {$format=$_POST["format"];}
if (isset($_GET["vmail_box"])) {$vmail_box=$_GET["vmail_box"];}
elseif (isset($_POST["vmail_box"])) {$vmail_box=$_POST["vmail_box"];}
# default optional vars if not set
if (!$format) {$format="text";}
if (!isset($format)) {$format="text";}
$version = '0.0.3';
$build = '50711-1201';
$version = '0.0.4';
$build = '60421-1147';
$StarTtime = date("U");
$NOW_DATE = date("Y-m-d");
$NOW_TIME = date("Y-m-d H:i:s");
if (!$query_date) {$query_date = $NOW_DATE;}
if (!isset($query_date)) {$query_date = $NOW_DATE;}
$stmt="SELECT count(*) from vicidial_users where user='$user' and pass='$pass' and user_level > 0;";
if ($DB) {echo "|$stmt|\n";}
@@ -51,7 +55,7 @@ if (!$query_date) {$query_date = $NOW_DATE;}
$row=mysql_fetch_row($rslt);
$auth=$row[0];
if( (strlen($user)<2) or (strlen($pass)<2) or (!$auth))
if( (strlen($user)<2) or (strlen($pass)<2) or ($auth==0))
{
echo "Invalid Username/Password: |$user|$pass|\n";
exit;
@@ -59,7 +63,7 @@ if (!$query_date) {$query_date = $NOW_DATE;}
else
{
if( ( (strlen($server_ip)<6) or (!$server_ip) ) or ( (strlen($session_name)<12) or (!$session_name) ) )
if( (strlen($server_ip)<6) or (!isset($server_ip)) or ( (strlen($session_name)<12) or (!isset($session_name)) ) )
{
echo "Invalid server_ip: |$server_ip| or Invalid session_name: |$session_name|\n";
exit;
@@ -71,7 +75,7 @@ if (!$query_date) {$query_date = $NOW_DATE;}
$rslt=mysql_query($stmt, $link);
$row=mysql_fetch_row($rslt);
$SNauth=$row[0];
if(!$SNauth)
if($SNauth==0)
{
echo "Invalid session_name: |$session_name|$server_ip|\n";
exit;