security fix issue #544

git-svn-id: svn://192.168.202.10@1773 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2012-01-17 19:58:29 +00:00
parent bf7345cfff
commit 4116939fd1
+5 -3
View File
@@ -1,7 +1,7 @@
<?php
# callcard_admin.php
#
# Copyright (C) 2010 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2012 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This callcard script is to administer the callcard accounts in ViciDial
# it is separate from the standard admin.php script. callcard_enabled in
@@ -12,10 +12,11 @@
# 100525-1824 - Added generate option
# 100616-0847 - Fixed batch issue
# 100823-1342 - Added Search option and display for level 7 users, added pin number search
# 120117-1457 - Security fix, issue #544
#
$version = '2.4-4';
$build = '100823-1342';
$version = '2.4-5';
$build = '120117-1457';
$MT[0]='';
@@ -116,6 +117,7 @@ if ($non_latin < 1)
$old_territory = ereg_replace("[^-\_0-9a-zA-Z]","",$old_territory);
$old_user = ereg_replace("[^-\_0-9a-zA-Z]","",$old_user);
$accountid = ereg_replace("[^-\_0-9a-zA-Z]","",$accountid);
$pin = ereg_replace("[^0-9a-zA-Z]","",$pin);
}
if (eregi("YES",$batch))