ViciDial/agc_2-X
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added additional variable filtering

Browse Source 
git-svn-id: svn://192.168.202.10@2760 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2017-05-27 07:14:38 +00:00
parent a8cc3801ad
commit 4e8f877f4b
95 changed files with 414 additions and 53 deletions
Download Patch File Download Diff File Expand all files Collapse all files
www/agc/vdc_script_notes.php
+11 -4
View File
@@ -1,7 +1,7 @@
<?php
# vdc_script_notes.php
#
# Copyright (C) 2014 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2017 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed open in the SCRIPT tab in the agent interface through
# an IFRAME. It will create a new record for every SUBMIT
@@ -17,10 +17,11 @@
# 130802-1037 - Changed to PHP mysqli functions
# 140810-2113 - Changed to use QXZ function for echoing text
# 141216-2132 - Added language settings lookups and user/pass variable standardization
# 170526-2345 - Added additional variable filtering
#
$version = '2.10-7';
$build = '141216-2132';
$version = '2.14-8';
$build = '170526-2345';
require_once("dbconnect_mysqli.php");
require_once("functions.php");
@@ -217,9 +218,15 @@ $agents='@agents';
if (strlen($call_date) < 1)
{$call_date = $NOW_TIME;}
$user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$list_id = preg_replace('/[^0-9]/', '', $list_id);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$session_id = preg_replace('/[^0-9]/','',$session_id);
$uniqueid = preg_replace('/[^-_\.0-9a-zA-Z]/','',$uniqueid);
$campaign = preg_replace('/[^-_0-9a-zA-Z]/','',$campaign);
$group = preg_replace('/[^-_0-9a-zA-Z]/','',$group);
$session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name);
#############################################
##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP #####