LICENSE: GPLv2 ### # CHANGES # # 60619-1738 - Added variable filtering to eliminate SQL injection attack threat # header ("Content-type: text/html; charset=utf-8"); require("dbconnect.php"); $PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER']; $PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW']; $PHP_SELF=$_SERVER['PHP_SELF']; if (isset($_GET["begin_date"])) {$begin_date=$_GET["begin_date"];} elseif (isset($_POST["begin_date"])) {$begin_date=$_POST["begin_date"];} if (isset($_GET["end_date"])) {$end_date=$_GET["end_date"];} elseif (isset($_POST["end_date"])) {$end_date=$_POST["end_date"];} if (isset($_GET["user"])) {$user=$_GET["user"];} elseif (isset($_POST["user"])) {$user=$_POST["user"];} if (isset($_GET["group"])) {$group=$_GET["group"];} elseif (isset($_POST["group"])) {$group=$_POST["group"];} if (isset($_GET["stage"])) {$stage=$_GET["stage"];} elseif (isset($_POST["stage"])) {$stage=$_POST["stage"];} if (isset($_GET["submit"])) {$submit=$_GET["submit"];} elseif (isset($_POST["submit"])) {$submit=$_POST["submit"];} if (isset($_GET["SUBMIT"])) {$SUBMIT=$_GET["SUBMIT"];} elseif (isset($_POST["SUBMIT"])) {$SUBMIT=$_POST["SUBMIT"];} $PHP_AUTH_USER = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_USER); $PHP_AUTH_PW = ereg_replace("[^0-9a-zA-Z]","",$PHP_AUTH_PW); $STARTtime = date("U"); $TODAY = date("Y-m-d"); if (!isset($begin_date)) {$begin_date = $TODAY;} if (!isset($end_date)) {$end_date = $TODAY;} $stmt="SELECT count(*) from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW' and user_level > 7;"; $rslt=mysql_query($stmt, $link); $row=mysql_fetch_row($rslt); $auth=$row[0]; $fp = fopen ("./project_auth_entries.txt", "a"); $date = date("r"); $ip = getenv("REMOTE_ADDR"); $browser = getenv("HTTP_USER_AGENT"); if( (strlen($PHP_AUTH_USER)<2) or (strlen($PHP_AUTH_PW)<2) or (!$auth)) { Header("WWW-Authenticate: Basic realm=\"VICI-PROJECTS\""); Header("HTTP/1.0 401 Unauthorized"); echo "Unzulässiges Username/Kennwort:|$PHP_AUTH_USER|$PHP_AUTH_PW|\n"; exit; } else { if($auth>0) { $stmt="SELECT full_name,change_agent_campaign from vicidial_users where user='$PHP_AUTH_USER' and pass='$PHP_AUTH_PW'"; $rslt=mysql_query($stmt, $link); $row=mysql_fetch_row($rslt); $LOGfullname=$row[0]; $change_agent_campaign=$row[1]; fwrite ($fp, "VICIDIAL|GOOD|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|$LOGfullname|\n"); fclose($fp); } else { fwrite ($fp, "VICIDIAL|FAIL|$date|$PHP_AUTH_USER|$PHP_AUTH_PW|$ip|$browser|\n"); fclose($fp); } $stmt="SELECT full_name from vicidial_users where user='" . mysql_real_escape_string($user) . "';"; $rslt=mysql_query($stmt, $link); $row=mysql_fetch_row($rslt); $full_name = $row[0]; $stmt="SELECT * from vicidial_live_agents where user='" . mysql_real_escape_string($user) . "';"; $rslt=mysql_query($stmt, $link); if ($DB) {echo "$stmt\n";} $agents_to_print = mysql_num_rows($rslt); $i=0; while ($i < $agents_to_print) { $row=mysql_fetch_row($rslt); $Aserver_ip = $row[2]; $Asession_id = $row[3]; $Aextension = $row[4]; $Astatus = $row[5]; $Acampaign = $row[7]; $Alast_call = $row[14]; $Acl_campaigns = $row[15]; $i++; } } $stmt="select * from vicidial_campaigns;"; $rslt=mysql_query($stmt, $link); if ($DB) {echo "$stmt\n";} $groups_to_print = mysql_num_rows($rslt); $i=0; while ($i < $groups_to_print) { $row=mysql_fetch_row($rslt); $groups[$i] =$row[0]; $i++; } ?> VICIDIAL ADMIN: User Status \n"; ?>
\n"; echo "
  VICIDIAL ADMIN: User Status for  
  \n"; if ($stage == "live_campaign_change") { $stmt="UPDATE vicidial_live_agents set campaign_id='" . mysql_real_escape_string($group) . "' where user='" . mysql_real_escape_string($user) . "';"; $rslt=mysql_query($stmt, $link); echo "Agent $user - $full_name changed to $group campaign
\n"; exit; } if ($stage == "log_agent_out") { $stmt="DELETE from vicidial_live_agents where user='" . mysql_real_escape_string($user) . "';"; $rslt=mysql_query($stmt, $link); echo "Agent $user - $full_name has been emergency logged out, make sure they close their web browser
\n"; exit; } if ($agents_to_print > 0) { echo "
";
	echo "Agent Logged in at server:  $Aserver_ip\n";
	echo "               in session:  $Asession_id\n";
	echo "               from phone:  $Aextension\n";
	echo "Agent is in campaign:       $Acampaign\n";
	echo "              status:       $Astatus\n";
	echo " hungup last call at:       $Alast_call\n";
	echo "       Closer groups:       $Acl_campaigns\n\n";

	echo "
"; if ($change_agent_campaign > 0) { echo "
\n"; echo "\n"; echo "\n"; echo "Current Kampagne: \n"; echo "
\n"; echo "
\n"; echo "\n"; echo "\n"; echo "
\n"; } } else { echo "Agent is not logged in\n
"; } echo "           $user - $full_name - \n"; echo "VICIDIAL Time Sheet\n"; echo "
\n"; $ENDtime = date("U"); $RUNtime = ($ENDtime - $STARTtime); echo "\n\n\n


\n\n"; echo "\n\n\n


\nIndexlaufzeit: $RUNtime seconds
"; echo "|$stage|$group|"; ?>