From 4cf71b9de8176c823ba79c055ecbd527ceb1ebd9 Mon Sep 17 00:00:00 2001 From: mattf Date: Sat, 2 Jun 2018 13:02:35 +0000 Subject: [PATCH] small fix for multirecording script git-svn-id: svn://192.168.202.10@2997 3d104415-ff17-0410-8863-d5cf3c621b8a --- extras/SCRIPT_multirecording.php | 312 +++++++++++++++---------------- 1 file changed, 156 insertions(+), 156 deletions(-) diff --git a/extras/SCRIPT_multirecording.php b/extras/SCRIPT_multirecording.php index eae700a0..ab92a62f 100644 --- a/extras/SCRIPT_multirecording.php +++ b/extras/SCRIPT_multirecording.php @@ -1,156 +1,156 @@ - LICENSE: AGPLv2 -# - works in conjunction with SCRIPT_multirecording_AJAX.php to allow reps the ability to make their own recordings over the course of a call while the entire call is being recorded into its own file, as in ALLFORCE recording. -# -# Implementation is done by creating a script in the Scripts section that calls this page within an -# -# All style parameters may be adjusted to suit your needs, but all variables listed in the above example MUST be passed to the VICI_multirecording.php page if this is implemented. -# Variables are: campaign, lead_id, phone_number, session_id, server_ip, user, vendor_lead_code, uniqueid -# -# CHANGELOG -# 120227-1512 - First Build -# 160401-0026 - HTML formatting fixes -# 170526-2158 - Added variable filtering -# 180514-2230 - Switched to mysqli -# - -require("dbconnect_mysqli.php"); -if (isset($_GET["campaign"])) {$campaign=$_GET["campaign"];} - elseif (isset($_POST["campaign"])) {$campaign=$_POST["campaign"];} -if (isset($_GET["lead_id"])) {$lead_id=$_GET["lead_id"];} - elseif (isset($_POST["lead_id"])) {$lead_id=$_POST["lead_id"];} -if (isset($_GET["phone_number"])) {$phone_number=$_GET["phone_number"];} - elseif (isset($_POST["phone_number"])) {$phone_number=$_POST["phone_number"];} -if (isset($_GET["user"])) {$user=$_GET["user"];} - elseif (isset($_POST["user"])) {$user=$_POST["user"];} -if (isset($_GET["session_id"])) {$session_id=$_GET["session_id"];} - elseif (isset($_POST["session_id"])) {$session_id=$_POST["session_id"];} -if (isset($_GET["server_ip"])) {$server_ip=$_GET["server_ip"];} - elseif (isset($_POST["server_ip"])) {$server_ip=$_POST["server_ip"];} -if (isset($_GET["uniqueid"])) {$uniqueid=$_GET["uniqueid"];} - elseif (isset($_POST["uniqueid"])) {$uniqueid=$_POST["uniqueid"];} -if (isset($_GET["vendor_lead_code"])) {$vendor_lead_code=$_GET["vendor_lead_code"];} - elseif (isset($_POST["vendor_lead_code"])) {$vendor_lead_code=$_POST["vendor_lead_code"];} - - -# filter variables -$campaign = preg_replace('/[^-_0-9a-zA-Z]/','',$campaign); -$phone_number = preg_replace('/[^-_0-9a-zA-Z]/','',$phone_number); -$lead_id = preg_replace('/[^0-9]/','',$lead_id); -$session_id = preg_replace('/[^0-9]/','',$session_id); -$vendor_lead_code = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$vendor_lead_code); -$user = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$user); -$server_ip = preg_replace('/[^\.0-9]/','',$server_ip); -$uniqueid = preg_replace('/[^-_\.0-9a-zA-Z]/','',$uniqueid); -$rec_action = preg_replace('/[^0-9a-zA-Z]/','',$rec_action); -$recording_channel = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$recording_channel); - - -?> - - -script multirecording button page - - - - -
-
- - -, 'START')" value="START RECORDING"> - - -
-
- - - + LICENSE: AGPLv2 +# - works in conjunction with SCRIPT_multirecording_AJAX.php to allow reps the ability to make their own recordings over the course of a call while the entire call is being recorded into its own file, as in ALLFORCE recording. +# +# Implementation is done by creating a script in the Scripts section that calls this page within an +# +# All style parameters may be adjusted to suit your needs, but all variables listed in the above example MUST be passed to the VICI_multirecording.php page if this is implemented. +# Variables are: campaign, lead_id, phone_number, session_id, server_ip, user, vendor_lead_code, uniqueid +# +# CHANGELOG +# 120227-1512 - First Build +# 160401-0026 - HTML formatting fixes +# 170526-2158 - Added variable filtering +# 180514-2230 - Switched to mysqli, fixed variable filtering bug +# + +require("dbconnect_mysqli.php"); +if (isset($_GET["campaign"])) {$campaign=$_GET["campaign"];} + elseif (isset($_POST["campaign"])) {$campaign=$_POST["campaign"];} +if (isset($_GET["lead_id"])) {$lead_id=$_GET["lead_id"];} + elseif (isset($_POST["lead_id"])) {$lead_id=$_POST["lead_id"];} +if (isset($_GET["phone_number"])) {$phone_number=$_GET["phone_number"];} + elseif (isset($_POST["phone_number"])) {$phone_number=$_POST["phone_number"];} +if (isset($_GET["user"])) {$user=$_GET["user"];} + elseif (isset($_POST["user"])) {$user=$_POST["user"];} +if (isset($_GET["session_id"])) {$session_id=$_GET["session_id"];} + elseif (isset($_POST["session_id"])) {$session_id=$_POST["session_id"];} +if (isset($_GET["server_ip"])) {$server_ip=$_GET["server_ip"];} + elseif (isset($_POST["server_ip"])) {$server_ip=$_POST["server_ip"];} +if (isset($_GET["uniqueid"])) {$uniqueid=$_GET["uniqueid"];} + elseif (isset($_POST["uniqueid"])) {$uniqueid=$_POST["uniqueid"];} +if (isset($_GET["vendor_lead_code"])) {$vendor_lead_code=$_GET["vendor_lead_code"];} + elseif (isset($_POST["vendor_lead_code"])) {$vendor_lead_code=$_POST["vendor_lead_code"];} + + +# filter variables +$campaign = preg_replace('/[^-_0-9a-zA-Z]/','',$campaign); +$phone_number = preg_replace('/[^-_0-9a-zA-Z]/','',$phone_number); +$lead_id = preg_replace('/[^0-9]/','',$lead_id); +$session_id = preg_replace('/[^0-9]/','',$session_id); +$vendor_lead_code = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$vendor_lead_code); +$user = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$user); +$server_ip = preg_replace('/[^\.0-9]/','',$server_ip); +$uniqueid = preg_replace('/[^-_\.0-9a-zA-Z]/','',$uniqueid); +$rec_action = preg_replace('/[^0-9a-zA-Z]/','',$rec_action); +$recording_channel = preg_replace("/\||`|&|\'|\"|\\\\| /","",$recording_channel); + + +?> + + +script multirecording button page + + + + +
+
+ + +, 'START')" value="START RECORDING"> + + +
+
+ + +