ViciDial/ViciDialSVN
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added input variable filtering to server performance report

Browse Source 
git-svn-id: svn://192.168.202.10@2736 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2017-04-22 12:01:32 +00:00
parent 8a179e0eac
commit ef0c3c23bf
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
agc_2-X/trunk/www/vicidial/AST_server_performance.php
+6 -1
View File
@@ -26,6 +26,7 @@
# 141114-0730 - Finalized adding QXZ translation to all admin files
# 141230-1440 - Added code for on-the-fly language translations display
# 170409-1550 - Added IP List validation code
# 170422-0750 - Added input variable filtering
#
$startMS = microtime();
@@ -82,6 +83,10 @@ else
$PHP_AUTH_USER = preg_replace("/'|\"|\\\\|;/","",$PHP_AUTH_USER);
}
$begin_query_time = preg_replace('/[^- \:_0-9a-zA-Z]/', '', $begin_query_time);
$end_query_time = preg_replace('/[^- \:_0-9a-zA-Z]/', '', $end_query_time);
$group = preg_replace('/[^\._0-9a-zA-Z]/', '', $group);
$stmt="SELECT selected_language from vicidial_users where user='$PHP_AUTH_USER';";
if ($DB) {echo "|$stmt|\n";}
$rslt=mysql_to_mysqli($stmt, $link);
@@ -529,7 +534,7 @@ else
echo "\n";
echo "<IMG SRC=\"/$PLOTroot/$PNGfile\">\n";
echo "<!-- /usr/local/bin/pl -png $DOCroot/$HTMfile -o $DOCroot/$PNGfile -->";
#echo "<!-- /usr/local/bin/pl -png $DOCroot/$HTMfile -o $DOCroot/$PNGfile -->";
}
if ($db_source == 'S')