\n";
-
-if (strlen($QUERY_recid)<10)
- {
- echo "Please enter a recording ID(customer phone number) below:\n";
- }
-else
- {
- $logs_to_print=0;
- echo "searching for: $QUERY_recid\n";
- echo "\n";
-
- $stmt="select recording_id,lead_id,user,filename,location,start_time,length_in_sec from recording_log where filename LIKE \"%$QUERY_recid%\" order by recording_id desc LIMIT 1;";
- $rslt=mysql_to_mysqli($stmt, $linkAST);
- $logs_to_print = mysqli_num_rows($rslt);
- #echo "|$stmt|";
-
- $u=0;
- if ($logs_to_print)
- {
- $row=mysqli_fetch_row($rslt);
- $phone = $QUERY_recid;
- $recording_id = $row[0];
- $lead_id = $row[1];
- $user = $row[2];
- $filename = $row[3];
- $location = $row[4];
- $start_time = $row[5];
- $length_in_sec = $row[6];
- $AUDname = explode("/",$location);
- $AUDnamect = (count($AUDname)) - 1;
-
-
- preg_replace('/10\.10\.10\.16/i', "10.10.10.16",$AUDname[$AUDnamect]);
-
- echo "Call Date/Time: $start_time\n";
- echo "Recording Length: $length_in_sec\n";
- echo "Phone Number: $phone\n";
- echo "Recording ID: $recording_id\n";
- echo "Agent: $user\n";
- # echo "filename: $filename\n";
- # echo "Location: $location\n";
- # echo "AUDname: $AUDname[$AUDnamect]\n";
- echo "Unique ID: $lead_id\n";
-
- $fileGSM=$AUDname[$AUDnamect];
- $locationGSM=$location;
- $fileGSM = preg_replace('/\.wav/i', ".gsm",$fileGSM);
- if (!preg_match('/gsm/i',$locationGSM))
- {
- $locationGSM = preg_replace('/10\.10\.10\.16/i', "10.10.10.16/GSM",$locationGSM);
- $locationGSM = preg_replace('/\.wav/i', ".gsm",$locationGSM);
- }
- passthru("/usr/local/apache2/htdocs/vicidial/wget --output-document=/usr/local/apache2/htdocs/vicidial/temp/$AUDname[$AUDnamect] $location\n");
- passthru("/usr/local/apache2/htdocs/vicidial/wget --output-document=/usr/local/apache2/htdocs/vicidial/temp/$fileGSM $locationGSM\n");
-
- echo "Link Uncompressed WAV: $AUDname[$AUDnamect]\n";
- echo "Link Compressed GSM: $fileGSM\n";
- }
- else
- {
- echo "ERROR: $QUERY_recid\n";
- }
-
- echo "\n";
- }
-
-$ENDtime = date("U");
-
-$RUNtime = ($ENDtime - $STARTtime);
-
-echo "\n\n\n
\n\n";
-
-
-echo "\n\n\n
\nscript runtime: $RUNtime seconds";
-
-
-?>
-
-
-
-
+removed
\ No newline at end of file
diff --git a/www/vicidial/recording_lookup_DIRECT.php b/www/vicidial/recording_lookup_DIRECT.php
index 3ecb9363..b3fa41da 100644
--- a/www/vicidial/recording_lookup_DIRECT.php
+++ b/www/vicidial/recording_lookup_DIRECT.php
@@ -1,157 +1 @@
- LICENSE: AGPLv2
-#
-
-# CHANGES
-# 71112-1409 - First Build
-# 90508-0644 - Changed to PHP long tags
-# 130610-1132 - Finalized changing of all ereg instances to preg
-# 130616-2225 - Added filtering of input to prevent SQL injection attacks
-# 130901-0855 - Changed to mysqli PHP functions
-#
-
-$STARTtime = date("U");
-$TODAYstart = date("H/i/s 00:00:00");
-
-#$linkAST=mysql_connect("1.1.1.1", "cron", "1234");
-#mysql_select_db("asterisk");
-$linkAST=mysqli_connect("1.1.1.1", "cron", "1234", "asterisk");
-
-$PHP_AUTH_USER=$_SERVER['PHP_AUTH_USER'];
-$PHP_AUTH_PW=$_SERVER['PHP_AUTH_PW'];
-$PHP_SELF=$_SERVER['PHP_SELF'];
-$PHP_SELF = preg_replace('/\.php.*/i','.php',$PHP_SELF);
-if (isset($_GET["phone"])) {$phone=$_GET["phone"];}
- elseif (isset($_POST["phone"])) {$phone=$_POST["phone"];}
-if (isset($_GET["format"])) {$format=$_GET["format"];}
- elseif (isset($_POST["format"])) {$format=$_POST["format"];}
-if (isset($_GET["auth"])) {$auth=$_GET["auth"];}
- elseif (isset($_POST["auth"])) {$auth=$_POST["auth"];}
-if (isset($_GET["DB"])) {$DB=$_GET["DB"];}
- elseif (isset($_POST["DB"])) {$DB=$_POST["DB"];}
-
-$DB = preg_replace('/[^0-9]/','',$DB);
-$DB=0; # disable $DB, it's not used in this script
-
-$phone = preg_replace("/\<|\>|\'|\"|\\\\|;/","",$phone);
-$format = preg_replace("/\<|\>|\'|\"|\\\\|;/","",$format);
-$auth = preg_replace("/\<|\>|\'|\"|\\\\|;/","",$auth);
-
-$US='_';
-
-if(preg_match("/VDC1234593JH654398722/i",$auth))
- {$nothing=1;}
-else
- {
- echo "auth code: |$auth|\n";
- exit;
- }
-
-$fp = fopen ("/usr/local/apache2/htdocs/vicidial/auth_entries.txt", "w");
-$date = date("r");
-$ip = getenv("REMOTE_ADDR");
-$browser = getenv("HTTP_USER_AGENT");
-fwrite ($fp, "AUTH|VDC |$date|\n");
-fclose($fp);
-
-if (strlen($format)<3) {$format='WAV';}
-if ( (strlen($phone)<10) or (strlen($phone)>10) )
- {
- echo "\n";
- echo "\n";
- echo "Recording ID Lookup: \n";
- echo "\n";
- echo "\n";
- echo "
\n";
- echo "You need to use only a 10-digit phone number
\n";
- echo "recording_lookup_DIRECT.php?format=WAV&phone=7275551212&auth=VDC1234593JH654398722\n
";
- exit;
- }
-else
- {
- $stmt="select recording_id,filename,location,start_time from recording_log where filename LIKE \"%$phone%\" order by recording_id desc LIMIT 1;";
- $rslt=mysql_to_mysqli($stmt, $linkAST);
- $logs_to_print = mysqli_num_rows($rslt);
-
- $u=0;
- if ($logs_to_print)
- {
- $row=mysqli_fetch_row($rslt);
- $recording_id = $row[0];
- $filename = $row[1];
- $location = $row[2];
- $start_time = $row[3];
- $AUDname = explode("/",$location);
- $AUDnamect = (count($AUDname)) - 1;
-
- preg_replace('/10\.10\.10\.16/i', "10.10.10.16",$AUDname[$AUDnamect]);
-
- $fileGSM=$AUDname[$AUDnamect];
- $locationGSM=$location;
- $fileGSM = preg_replace('/\.wav/i', ".gsm",$fileGSM);
- if (!preg_match('/gsm/i',$locationGSM))
- {
- $locationGSM = preg_replace('/10\.10\.10\.16/i', "10.10.10.16/GSM",$locationGSM);
- $locationGSM = preg_replace('/\.wav/i', ".gsm",$locationGSM);
- }
- if ($format == 'WAV')
- {
- exec("/usr/local/apache2/htdocs/vicidial/wget --output-document=/usr/local/apache2/htdocs/vicidial/temp/$AUDname[$AUDnamect] $location\n");
-
- $AUDIOfile = "/usr/local/apache2/htdocs/vicidial/temp/$AUDname[$AUDnamect]";
- $AUDIOfilename = "$AUDname[$AUDnamect]";
- // We'll be outputting a PDF
- header('Content-type: audio/wav');
- // It will be named properly
- header("Content-Disposition: attachment; filename=\"$AUDIOfilename\"");
- // The PDF source is in original.pdf
- readfile($AUDIOfile);
- }
-
- if ($format == 'GSM')
- {
- passthru("/usr/local/apache2/htdocs/vicidial/wget --output-document=/usr/local/apache2/htdocs/vicidial/temp/$fileGSM $locationGSM\n");
-
- $AUDIOfile = "/usr/local/apache2/htdocs/vicidial/temp/$fileGSM";
- $AUDIOfilename = "$fileGSM";
- // We'll be outputting a PDF
- header('Content-type: audio/gsm');
- // It will be named properly
- header("Content-Disposition: attachment; filename=\"$AUDIOfilename\"");
- // The PDF source is in original.pdf
- readfile($AUDIOfile);
- }
- }
- else
- {
- echo "ERROR: $phone|$format\n";
- }
- }
-?>
+removed
\ No newline at end of file