From f0c47bab9695434a8ea7d57c472dcc012c6d0369 Mon Sep 17 00:00:00 2001 From: mattf Date: Tue, 31 Jan 2023 13:27:46 +0000 Subject: [PATCH] Added filtering of 3-way number to dial to remove non-diable characters in vicidial.php git-svn-id: svn://192.168.202.10@3677 3d104415-ff17-0410-8863-d5cf3c621b8a --- agc_2-X/trunk/www/agc/vicidial.php | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/agc_2-X/trunk/www/agc/vicidial.php b/agc_2-X/trunk/www/agc/vicidial.php index f374a178..cdb921d8 100644 --- a/agc_2-X/trunk/www/agc/vicidial.php +++ b/agc_2-X/trunk/www/agc/vicidial.php @@ -1,7 +1,7 @@ LICENSE: AGPLv2 +# Copyright (C) 2023 Matt Florell LICENSE: AGPLv2 # # Other scripts that this application depends on: # - vdc_db_query.php: Updates information in the database @@ -709,10 +709,11 @@ # 221116-2159 - Fix for recording buttons ALLFORCE issue #1389 # 221206-1520 - Added login form multi-submit prevention ($login_submit_once), Added dialRegExten_enabled webphone option # 230118-0947 - Added agent_hangup_route features +# 230131-0826 - Added filtering of 3-way number to dial to remove non-diable characters # -$version = '2.14-677c'; -$build = '230118-0947'; +$version = '2.14-678c'; +$build = '230131-0826'; $php_script = 'vicidial.php'; $mel=1; # Mysql Error Log enabled = 1 $mysql_log_count=98; @@ -6586,6 +6587,7 @@ function holiday_display(holiday_name) var manual_string = manual_number.toString(); var dial_conf_exten = session_id; + manual_string = manual_string.replace(/\||`|&|\'|\"|\\\\|;| /ig,''); var testXFregstr = 'x' + manual_string + 'x' var regXFSRvars = new RegExp(testXFregstr,"g"); // test for three_way_record_stop and exception