2006-04-21_snapshot

git-svn-id: svn://192.168.202.10@5 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2006-07-07 15:17:45 +00:00
parent d82d30a9ef
commit 110b17ad04
54 changed files with 2283 additions and 1461 deletions
+60 -45
View File
@@ -29,59 +29,74 @@
###
# changes
# 50323-1147 First build of script
# 50401-1132 small formatting changes
# 50502-1402 added field_name as modifiable variable
# 50503-1213 added session_name checking for extra security
# 50503-1311 added conferences list
# 50610-1155 Added NULL check on MySQL results to reduced errors
# 50711-1209 removed HTTP authentication in favor of user/pass vars
# 50323-1147 - First build of script
# 50401-1132 - small formatting changes
# 50502-1402 - added field_name as modifiable variable
# 50503-1213 - added session_name checking for extra security
# 50503-1311 - added conferences list
# 50610-1155 - Added NULL check on MySQL results to reduced errors
# 50711-1209 - removed HTTP authentication in favor of user/pass vars
# 60421-1155 - check GET/POST vars lines with isset to not trigger PHP NOTICES
#
require("dbconnect.php");
#require_once("htglobalize.php");
### If you have globals turned off uncomment these lines
$user=$_GET["user"]; if (!$user) {$user=$_POST["user"];}
$pass=$_GET["pass"]; if (!$pass) {$pass=$_POST["pass"];}
$server_ip=$_GET["server_ip"]; if (!$server_ip) {$server_ip=$_POST["server_ip"];}
$session_name=$_GET["session_name"]; if (!$session_name) {$session_name=$_POST["session_name"];}
$ADD=$_GET["ADD"]; if (!$ADD) {$ADD=$_POST["ADD"];}
$order=$_GET["order"]; if (!$order) {$order=$_POST["order"];}
$format=$_GET["format"]; if (!$format) {$format=$_POST["format"];}
$bgcolor=$_GET["bgcolor"]; if (!$bgcolor) {$bgcolor=$_POST["bgcolor"];}
$txtcolor=$_GET["txtcolor"]; if (!$txtcolor) {$txtcolor=$_POST["txtcolor"];}
$txtsize=$_GET["txtsize"]; if (!$txtsize) {$txtsize=$_POST["txtsize"];}
$selectsize=$_GET["selectsize"]; if (!$selectsize) {$selectsize=$_POST["selectsize"];}
$selectfontsize=$_GET["selectfontsize"]; if (!$selectfontsize) {$selectfontsize=$_POST["selectfontsize"];}
$selectedext=$_GET["selectedext"]; if (!$selectedext) {$selectedext=$_POST["selectedext"];}
$selectedtrunk=$_GET["selectedtrunk"]; if (!$selectedtrunk) {$selectedtrunk=$_POST["selectedtrunk"];}
$selectedlocal=$_GET["selectedlocal"]; if (!$selectedlocal) {$selectedlocal=$_POST["selectedlocal"];}
$textareaheight=$_GET["textareaheight"]; if (!$textareaheight) {$textareaheight=$_POST["textareaheight"];}
$textareawidth=$_GET["textareawidth"]; if (!$textareawidth) {$textareawidth=$_POST["textareawidth"];}
$field_name=$_GET["field_name"]; if (!$field_name) {$field_name=$_POST["field_name"];}
if (isset($_GET["user"])) {$user=$_GET["user"];}
elseif (isset($_POST["user"])) {$user=$_POST["user"];}
if (isset($_GET["pass"])) {$pass=$_GET["pass"];}
elseif (isset($_POST["pass"])) {$pass=$_POST["pass"];}
if (isset($_GET["server_ip"])) {$server_ip=$_GET["server_ip"];}
elseif (isset($_POST["server_ip"])) {$server_ip=$_POST["server_ip"];}
if (isset($_GET["session_name"])) {$session_name=$_GET["session_name"];}
elseif (isset($_POST["session_name"])) {$session_name=$_POST["session_name"];}
if (isset($_GET["format"])) {$format=$_GET["format"];}
elseif (isset($_POST["format"])) {$format=$_POST["format"];}
if (isset($_GET["ADD"])) {$ADD=$_GET["ADD"];}
elseif (isset($_POST["ADD"])) {$ADD=$_POST["ADD"];}
if (isset($_GET["order"])) {$order=$_GET["order"];}
elseif (isset($_POST["order"])) {$order=$_POST["order"];}
if (isset($_GET["bgcolor"])) {$bgcolor=$_GET["bgcolor"];}
elseif (isset($_POST["bgcolor"])) {$bgcolor=$_POST["bgcolor"];}
if (isset($_GET["txtcolor"])) {$txtcolor=$_GET["txtcolor"];}
elseif (isset($_POST["txtcolor"])) {$txtcolor=$_POST["txtcolor"];}
if (isset($_GET["txtsize"])) {$txtsize=$_GET["txtsize"];}
elseif (isset($_POST["txtsize"])) {$txtsize=$_POST["txtsize"];}
if (isset($_GET["selectsize"])) {$selectsize=$_GET["selectsize"];}
elseif (isset($_POST["selectsize"])) {$selectsize=$_POST["selectsize"];}
if (isset($_GET["selectfontsize"])) {$selectfontsize=$_GET["selectfontsize"];}
elseif (isset($_POST["selectfontsize"])) {$selectfontsize=$_POST["selectfontsize"];}
if (isset($_GET["selectedext"])) {$selectedext=$_GET["selectedext"];}
elseif (isset($_POST["selectedext"])) {$selectedext=$_POST["selectedext"];}
if (isset($_GET["selectedtrunk"])) {$selectedtrunk=$_GET["selectedtrunk"];}
elseif (isset($_POST["selectedtrunk"])) {$selectedtrunk=$_POST["selectedtrunk"];}
if (isset($_GET["selectedlocal"])) {$selectedlocal=$_GET["selectedlocal"];}
elseif (isset($_POST["selectedlocal"])) {$selectedlocal=$_POST["selectedlocal"];}
if (isset($_GET["textareaheight"])) {$textareaheight=$_GET["textareaheight"];}
elseif (isset($_POST["textareaheight"])) {$textareaheight=$_POST["textareaheight"];}
if (isset($_GET["textareawidth"])) {$textareawidth=$_GET["textareawidth"];}
elseif (isset($_POST["textareawidth"])) {$textareawidth=$_POST["textareawidth"];}
if (isset($_GET["field_name"])) {$field_name=$_GET["field_name"];}
elseif (isset($_POST["field_name"])) {$field_name=$_POST["field_name"];}
# default optional vars if not set
if (!$ADD) {$ADD="1";}
if (!$order) {$order='desc';}
if (!$format) {$format='table';}
if (!$bgcolor) {$bgcolor='white';}
if (!$txtcolor) {$txtcolor='black';}
if (!$txtsize) {$txtsize='2';}
if (!$selectsize) {$selectsize='4';}
if (!$selectfontsize) {$selectfontsize='10';}
if (!$textareaheight) {$textareaheight='10';}
if (!$textareawidth) {$textareawidth='20';}
if (!isset($ADD)) {$ADD="1";}
if (!isset($order)) {$order='desc';}
if (!isset($format)) {$format="text";}
if (!isset($bgcolor)) {$bgcolor='white';}
if (!isset($txtcolor)) {$txtcolor='black';}
if (!isset($txtsize)) {$txtsize='2';}
if (!isset($selectsize)) {$selectsize='4';}
if (!isset($selectfontsize)) {$selectfontsize='10';}
if (!isset($textareaheight)) {$textareaheight='10';}
if (!isset($textareawidth)) {$textareawidth='20';}
$version = '0.0.6';
$build = '50711-1209';
$version = '0.0.7';
$build = '60421-1155';
$StarTtime = date("U");
$NOW_DATE = date("Y-m-d");
$NOW_TIME = date("Y-m-d H:i:s");
if (!$query_date) {$query_date = $NOW_DATE;}
if (!isset($query_date)) {$query_date = $NOW_DATE;}
$stmt="SELECT count(*) from vicidial_users where user='$user' and pass='$pass' and user_level > 0;";
if ($DB) {echo "|$stmt|\n";}
@@ -89,7 +104,7 @@ if (!$query_date) {$query_date = $NOW_DATE;}
$row=mysql_fetch_row($rslt);
$auth=$row[0];
if( (strlen($user)<2) or (strlen($pass)<2) or (!$auth))
if( (strlen($user)<2) or (strlen($pass)<2) or ($auth==0))
{
echo "Invalid Username/Password: |$user|$pass|\n";
exit;
@@ -97,7 +112,7 @@ if (!$query_date) {$query_date = $NOW_DATE;}
else
{
if( ( (strlen($server_ip)<6) or (!$server_ip) ) or ( (strlen($session_name)<12) or (!$session_name) ) )
if( (strlen($server_ip)<6) or (!isset($server_ip)) or ( (strlen($session_name)<12) or (!isset($session_name)) ) )
{
echo "Invalid server_ip: |$server_ip| or Invalid session_name: |$session_name|\n";
exit;
@@ -109,7 +124,7 @@ if (!$query_date) {$query_date = $NOW_DATE;}
$rslt=mysql_query($stmt, $link);
$row=mysql_fetch_row($rslt);
$SNauth=$row[0];
if(!$SNauth)
if($SNauth==0)
{
echo "Invalid session_name: |$session_name|$server_ip|\n";
exit;