ViciDial/agc_2-X
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added additional variable filtering

Browse Source 
git-svn-id: svn://192.168.202.10@2760 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2017-05-27 07:14:38 +00:00
parent a8cc3801ad
commit 4e8f877f4b
95 changed files with 414 additions and 53 deletions
Download Patch File Download Diff File Expand all files Collapse all files
extras/SCRIPT_multirecording.php
+17 -1
View File
@@ -1,7 +1,7 @@
<?php <?php
# SCRIPT_multirecording.php - script page that stops/starts recordings being made over a forced-recording (ALLFORCE) call # SCRIPT_multirecording.php - script page that stops/starts recordings being made over a forced-recording (ALLFORCE) call
# #
# Copyright (C) 2016 Joe Johnson <joej@vicidial.com> LICENSE: AGPLv2 # Copyright (C) 2017 Joe Johnson <joej@vicidial.com> LICENSE: AGPLv2
# - works in conjunction with SCRIPT_multirecording_AJAX.php to allow reps the ability to make their own recordings over the course of a call while the entire call is being recorded into its own file, as in ALLFORCE recording. # - works in conjunction with SCRIPT_multirecording_AJAX.php to allow reps the ability to make their own recordings over the course of a call while the entire call is being recorded into its own file, as in ALLFORCE recording.
# #
# Implementation is done by creating a script in the Scripts section that calls this page within an <iframe> tag which passes several essential dialer variables to the page # Implementation is done by creating a script in the Scripts section that calls this page within an <iframe> tag which passes several essential dialer variables to the page
@@ -15,6 +15,7 @@
# CHANGELOG # CHANGELOG
# 120227-1512 - First Build # 120227-1512 - First Build
# 160401-0026 - HTML formatting fixes # 160401-0026 - HTML formatting fixes
# 170526-2158 - Added variable filtering
# #
require("dbconnect.php"); require("dbconnect.php");
@@ -34,6 +35,21 @@ if (isset($_GET["uniqueid"])) {$uniqueid=$_GET["uniqueid"];}
elseif (isset($_POST["uniqueid"])) {$uniqueid=$_POST["uniqueid"];} elseif (isset($_POST["uniqueid"])) {$uniqueid=$_POST["uniqueid"];}
if (isset($_GET["vendor_lead_code"])) {$vendor_lead_code=$_GET["vendor_lead_code"];} if (isset($_GET["vendor_lead_code"])) {$vendor_lead_code=$_GET["vendor_lead_code"];}
elseif (isset($_POST["vendor_lead_code"])) {$vendor_lead_code=$_POST["vendor_lead_code"];} elseif (isset($_POST["vendor_lead_code"])) {$vendor_lead_code=$_POST["vendor_lead_code"];}
# filter variables
$campaign = preg_replace('/[^-_0-9a-zA-Z]/','',$campaign);
$phone_number = preg_replace('/[^-_0-9a-zA-Z]/','',$phone_number);
$lead_id = preg_replace('/[^0-9]/','',$lead_id);
$session_id = preg_replace('/[^0-9]/','',$session_id);
$vendor_lead_code = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$vendor_lead_code);
$user = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$user);
$server_ip = preg_replace('/[^\.0-9]/','',$server_ip);
$uniqueid = preg_replace('/[^-_\.0-9a-zA-Z]/','',$uniqueid);
$rec_action = preg_replace('/[^0-9a-zA-Z]/','',$rec_action);
$recording_channel = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$recording_channel);
?> ?>
<html> <html>
<head> <head>
extras/SCRIPT_multirecording_AJAX.php
+14 -1
View File
@@ -1,7 +1,7 @@
<?php <?php
# SCRIPT_multirecording_AJAX.php - script that stops/starts recordings being made over a forced-recording (ALLFORCE) call # SCRIPT_multirecording_AJAX.php - script that stops/starts recordings being made over a forced-recording (ALLFORCE) call
# #
# Copyright (C) 2016 Joe Johnson, Matt Florell <mattf@vicidial.com> LICENSE: AGPLv2 # Copyright (C) 2017 Joe Johnson, Matt Florell <mattf@vicidial.com> LICENSE: AGPLv2
# #
# Other scripts that this application depends on: # Other scripts that this application depends on:
# - SCRIPT_multirecording.php: Gives agents ability to stop and start recordings over a forced-recording (ALLFORCE) call # - SCRIPT_multirecording.php: Gives agents ability to stop and start recordings over a forced-recording (ALLFORCE) call
@@ -10,6 +10,7 @@
# 120224-2240 - First Build # 120224-2240 - First Build
# 130328-0009 - Converted ereg to preg functions # 130328-0009 - Converted ereg to preg functions
# 160401-0026 - Fix for Asterisk 1.8 # 160401-0026 - Fix for Asterisk 1.8
# 170526-2157 - Added variable filtering
# #
require("dbconnect.php"); require("dbconnect.php");
@@ -42,6 +43,18 @@ $exten="8309";
$ext_context="default"; $ext_context="default";
#if (eregi("^10.10.", $server_ip)) {$ext_context="demo";} else {$ext_content="default";} #if (eregi("^10.10.", $server_ip)) {$ext_context="demo";} else {$ext_content="default";}
# filter variables
$campaign = preg_replace('/[^-_0-9a-zA-Z]/','',$campaign);
$phone_number = preg_replace('/[^-_0-9a-zA-Z]/','',$phone_number);
$lead_id = preg_replace('/[^0-9]/','',$lead_id);
$session_id = preg_replace('/[^0-9]/','',$session_id);
$vendor_lead_code = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$vendor_lead_code);
$user = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$user);
$server_ip = preg_replace('/[^\.0-9]/','',$server_ip);
$uniqueid = preg_replace('/[^-_\.0-9a-zA-Z]/','',$uniqueid);
$rec_action = preg_replace('/[^0-9a-zA-Z]/','',$rec_action);
$recording_channel = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$recording_channel);
$stmt="select campaign_rec_filename from vicidial_campaigns where campaign_id='$campaign'"; $stmt="select campaign_rec_filename from vicidial_campaigns where campaign_id='$campaign'";
$rslt=mysql_query($stmt, $link); $rslt=mysql_query($stmt, $link);
$row=mysql_fetch_array($rslt); $row=mysql_fetch_array($rslt);
www/agc/call_log_display.php
+8 -5
View File
@@ -1,7 +1,7 @@
<?php <?php
# call_log_display.php version 2.12 # call_log_display.php version 2.14
# #
# Copyright (C) 2015 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2 # Copyright (C) 2017 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# #
# This script is designed purely to send the inbound and outbound calls for a specific phone # This script is designed purely to send the inbound and outbound calls for a specific phone
# This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table # This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table
@@ -38,10 +38,11 @@
# 141128-0852 - Code cleanup for QXZ functions # 141128-0852 - Code cleanup for QXZ functions
# 141216-2113 - Added language settings lookups and user/pass variable standardization # 141216-2113 - Added language settings lookups and user/pass variable standardization
# 150723-1714 - Added ajax logging # 150723-1714 - Added ajax logging
# # 170526-2215 - Added additional variable filtering
#
$version = '0.0.12'; $version = '2.14-19';
$build = '150723-1714'; $build = '170526-2215';
$php_script = 'call_log_display.php'; $php_script = 'call_log_display.php';
$SSagent_debug_logging=0; $SSagent_debug_logging=0;
$startMS = microtime(); $startMS = microtime();
@@ -69,6 +70,8 @@ $user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name); $session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip); $server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$exten = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$exten);
$protocol = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$protocol);
# default optional vars if not set # default optional vars if not set
if (!isset($format)) {$format="text";} if (!isset($format)) {$format="text";}
www/agc/chat_db_query.php
+13 -1
View File
@@ -1,7 +1,7 @@
<?php <?php
# chat_db_query.php # chat_db_query.php
# #
# Copyright (C) 2016 Joe Johnson, Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2 # Copyright (C) 2017 Joe Johnson, Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# #
# Called by vdc_chat_display.php and vicidial_chat_agent.js. This contains all actions taken by the # Called by vdc_chat_display.php and vicidial_chat_agent.js. This contains all actions taken by the
# agent's interface when chatting with customers, other agents, and managers, through # agent's interface when chatting with customers, other agents, and managers, through
@@ -21,6 +21,7 @@
# 160831-2225 - Agent-to-agent interface now color-coded using system settings, if desired # 160831-2225 - Agent-to-agent interface now color-coded using system settings, if desired
# 161217-0824 - Added code for multi-user internal chat sessions # 161217-0824 - Added code for multi-user internal chat sessions
# 161221-0800 - Added color-coding for users in internal chat sessions # 161221-0800 - Added color-coding for users in internal chat sessions
# 170526-2257 - Added additional variable filtering
# #
require("dbconnect_mysqli.php"); require("dbconnect_mysqli.php");
@@ -102,6 +103,17 @@ if (!$user) {echo "No user, no using."; exit;}
if (file_exists('options.php')) if (file_exists('options.php'))
{require('options.php');} {require('options.php');}
# variable filtering
$user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$agent_manager = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$agent_manager);
$agent_user = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$agent_user);
$manager_chat_id = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$manager_chat_id);
$chat_creator = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$chat_creator);
$group_id = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$group_id);
############################################# #############################################
##### START SYSTEM_SETTINGS LOOKUP ##### ##### START SYSTEM_SETTINGS LOOKUP #####
$VUselected_language = ''; $VUselected_language = '';
www/agc/conf_exten_check.php
+7 -3
View File
@@ -76,10 +76,11 @@
# 161029-2216 - Formatting and additional agent debug logging # 161029-2216 - Formatting and additional agent debug logging
# 161217-0822 - Addded agent debug logging of dead call trigger # 161217-0822 - Addded agent debug logging of dead call trigger
# 170220-1307 - Added external_lead_id trigger for switch_lead API function # 170220-1307 - Added external_lead_id trigger for switch_lead API function
# 170526-2228 - Added additional variable filtering
# #
$version = '2.14-51'; $version = '2.14-52';
$build = '170220-1307'; $build = '170526-2228';
$php_script = 'conf_exten_check.php'; $php_script = 'conf_exten_check.php';
$mel=1; # Mysql Error Log enabled = 1 $mel=1; # Mysql Error Log enabled = 1
$mysql_log_count=44; $mysql_log_count=44;
@@ -176,7 +177,10 @@ if ($non_latin < 1)
$session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name); $session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip); $server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$conf_exten=preg_replace("/[^-_0-9a-zA-Z]/","",$conf_exten); $conf_exten = preg_replace("/[^-_0-9a-zA-Z]/","",$conf_exten);
$exten = preg_replace("/\'|\"|\\\\|;/","",$exten);
$clicks = preg_replace("/\'|\"|\\\\|;/","",$clicks);
$customer_chat_id = preg_replace("/[^0-9a-zA-Z]/","",$customer_chat_id);
# default optional vars if not set # default optional vars if not set
if (!isset($format)) {$format="text";} if (!isset($format)) {$format="text";}
www/agc/deactivate_lead.php
+7 -1
View File
@@ -1,7 +1,7 @@
<?php <?php
# deactivate_lead.php # deactivate_lead.php
# #
# Copyright (C) 2014 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2 # Copyright (C) 2017 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# #
# This script is designed to be used in the "Dispo URL" field of a campaign # This script is designed to be used in the "Dispo URL" field of a campaign
# or in-group. It should take in the campaign_id to check for the same source_id # or in-group. It should take in the campaign_id to check for the same source_id
@@ -30,6 +30,7 @@
# 140811-0845 - Changed to use QXZ function for echoing text # 140811-0845 - Changed to use QXZ function for echoing text
# 141118-1234 - Formatting changes for QXZ output # 141118-1234 - Formatting changes for QXZ output
# 141216-2130 - Added language settings lookups and user/pass variable standardization # 141216-2130 - Added language settings lookups and user/pass variable standardization
# 170526-2301 - Added additional variable filtering
# #
$api_script = 'deactivate'; $api_script = 'deactivate';
@@ -77,8 +78,13 @@ $NOW_TIME = date("Y-m-d H:i:s");
$sale_status = "$TD$sale_status$TD"; $sale_status = "$TD$sale_status$TD";
$search_value=''; $search_value='';
# filter variables
$user = preg_replace("/\'|\"|\\\\|;| /","",$user); $user = preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass = preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass = preg_replace("/\'|\"|\\\\|;| /","",$pass);
$search_field = preg_replace("/\'|\"|\\\\|;| /","",$search_field);
$lead_id = preg_replace('/[^0-9]/','',$lead_id);
$campaign_check = preg_replace('/[^-_0-9a-zA-Z]/','',$campaign_check);
$new_status = preg_replace('/[^-_0-9a-zA-Z]/','',$new_status);
############################################# #############################################
##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP ##### ##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP #####
www/agc/dispo_add_FPG.php
+6 -1
View File
@@ -1,7 +1,7 @@
<?php <?php
# dispo_add_FPG.php # dispo_add_FPG.php
# #
# Copyright (C) 2015 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2 # Copyright (C) 2017 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# #
# This script is designed to be used in the "Dispo URL" field of a campaign # This script is designed to be used in the "Dispo URL" field of a campaign
# or in-group. It adds the phone_number of the call to a designated inbound # or in-group. It adds the phone_number of the call to a designated inbound
@@ -20,6 +20,7 @@
# #
# CHANGES # CHANGES
# 150724-1657 - First Build # 150724-1657 - First Build
# 170526-2305 - Added additional variable filtering
# #
$api_script = 'add_FPG'; $api_script = 'add_FPG';
@@ -67,8 +68,12 @@ $search_value='';
$match_found=0; $match_found=0;
$k=0; $k=0;
# filter variables
$user=preg_replace("/\'|\"|\\\\|;| /","",$user); $user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$phone_number = preg_replace('/[^-_0-9a-zA-Z]/','',$phone_number);
$FPG_id = preg_replace("/\'|\"|\\\\|;| /","",$FPG_id);
$lead_id = preg_replace('/[^0-9]/','',$lead_id);
############################################# #############################################
##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP ##### ##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP #####
www/agc/dispo_move_list.php
+5
View File
@@ -59,6 +59,7 @@
# 160910-1354 - Added populate_... options # 160910-1354 - Added populate_... options
# 161021-1016 - Added lead_age option # 161021-1016 - Added lead_age option
# 170402-0906 - Added list_id_trigger option, cleaned up outputs # 170402-0906 - Added list_id_trigger option, cleaned up outputs
# 170526-2310 - Added additional variable filtering
# #
$api_script = 'movelist'; $api_script = 'movelist';
@@ -131,10 +132,13 @@ $primary_match_found=0;
$age_trigger=0; $age_trigger=0;
$k=0; $k=0;
# filter variables
$user=preg_replace("/\'|\"|\\\\|;| /","",$user); $user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$lead_age = preg_replace('/[^_0-9]/', '', $lead_age); $lead_age = preg_replace('/[^_0-9]/', '', $lead_age);
$lead_id = preg_replace('/[^_0-9]/', '', $lead_id);
$list_id = preg_replace('/[^_0-9]/', '', $list_id); $list_id = preg_replace('/[^_0-9]/', '', $list_id);
$new_list_id = preg_replace('/[^_0-9]/', '', $new_list_id);
$list_id_trigger = preg_replace('/[^_0-9]/', '', $list_id_trigger); $list_id_trigger = preg_replace('/[^_0-9]/', '', $list_id_trigger);
############################################# #############################################
@@ -283,6 +287,7 @@ else
elseif (isset($_POST["$newlistfield"])) {$new_list_id=$_POST["$newlistfield"];} elseif (isset($_POST["$newlistfield"])) {$new_list_id=$_POST["$newlistfield"];}
if (isset($_GET["$resetfield"])) {$reset_dialed=$_GET["$resetfield"];} if (isset($_GET["$resetfield"])) {$reset_dialed=$_GET["$resetfield"];}
elseif (isset($_POST["$resetfield"])) {$reset_dialed=$_POST["$resetfield"];} elseif (isset($_POST["$resetfield"])) {$reset_dialed=$_POST["$resetfield"];}
$new_list_id = preg_replace('/[^_0-9]/', '', $new_list_id);
if ($DB) {echo _QXZ("MULTI_MATCH:")." $k|$sale_status|$new_list_id|$reset_dialed|$exclude_status|$talk_time_trigger|$called_count_trigger|\n";} if ($DB) {echo _QXZ("MULTI_MATCH:")." $k|$sale_status|$new_list_id|$reset_dialed|$exclude_status|$talk_time_trigger|$called_count_trigger|\n";}
} }
} }
www/agc/dispo_send_email.php
+5
View File
@@ -21,6 +21,7 @@
# CHANGES # CHANGES
# 150806-1424 - First Build # 150806-1424 - First Build
# 170329-2145 - Added DID variables and custom fields values # 170329-2145 - Added DID variables and custom fields values
# 170526-2315 - Added additional variable filtering
# #
$api_script = 'send_email'; $api_script = 'send_email';
@@ -70,8 +71,12 @@ $k=0;
$mel=1; # Mysql Error Log enabled = 1 $mel=1; # Mysql Error Log enabled = 1
$mysql_log_count=14; $mysql_log_count=14;
# filter variables
$user=preg_replace("/\'|\"|\\\\|;| /","",$user); $user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$call_id = preg_replace('/[^-_0-9a-zA-Z]/', '', $call_id);
$lead_id = preg_replace('/[^_0-9]/', '', $lead_id);
$container_id = preg_replace('/[^-_0-9a-zA-Z]/', '', $container_id);
############################################# #############################################
##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP ##### ##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP #####
www/agc/inbound_popup.php
+8 -4
View File
@@ -1,7 +1,7 @@
<?php <?php
# inbound_popup.php version 2.10 # inbound_popup.php version 2.14
# #
# Copyright (C) 2014 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2 # Copyright (C) 2017 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# #
# This script is designed to open up when a live_inbound call comes in giving the user # This script is designed to open up when a live_inbound call comes in giving the user
# options of what to do with the call or options to lookup the callerID on various web sites # options of what to do with the call or options to lookup the callerID on various web sites
@@ -36,10 +36,11 @@
# 130802-1008 - Changed to PHP mysqli functions # 130802-1008 - Changed to PHP mysqli functions
# 140811-0843 - Changed to use QXZ function for echoing text # 140811-0843 - Changed to use QXZ function for echoing text
# 141216-2120 - Added language settings lookups and user/pass variable standardization # 141216-2120 - Added language settings lookups and user/pass variable standardization
# 170526-2231 - Added additional variable filtering
# #
$version = '0.0.12'; $version = '2.14-13';
$build = '141216-2120'; $build = '170526-2231';
require_once("dbconnect_mysqli.php"); require_once("dbconnect_mysqli.php");
require_once("functions.php"); require_once("functions.php");
@@ -72,10 +73,13 @@ if (isset($_GET["local_web_callerID_URL_enc"])) {$local_web_callerID_URL_enc=$
if (isset($_GET["local_web_callerID_URL_enc"])) {$local_web_callerID_URL = rawurldecode($local_web_callerID_URL_enc);} if (isset($_GET["local_web_callerID_URL_enc"])) {$local_web_callerID_URL = rawurldecode($local_web_callerID_URL_enc);}
else {$local_web_callerID_URL = '';} else {$local_web_callerID_URL = '';}
# variable filtering
$user=preg_replace("/\'|\"|\\\\|;| /","",$user); $user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name); $session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip); $server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$uniqueid = preg_replace('/[^-_\.0-9a-zA-Z]/','',$uniqueid);
$exten = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$exten);
# default optional vars if not set # default optional vars if not set
if (!isset($format)) {$format="text";} if (!isset($format)) {$format="text";}
www/agc/live_exten_check.php
+9 -4
View File
@@ -1,7 +1,7 @@
<?php <?php
# live_exten_check.php version 2.12 # live_exten_check.php version 2.14
# #
# Copyright (C) 2015 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2 # Copyright (C) 2017 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# #
# This script is designed purely to send whether the client channel is live and to what channel it is connected # This script is designed purely to send whether the client channel is live and to what channel it is connected
# This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table # This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table
@@ -39,10 +39,11 @@
# 141128-0854 - Code cleanup for QXZ functions # 141128-0854 - Code cleanup for QXZ functions
# 141216-2109 - Added language settings lookups and user/pass variable standardization # 141216-2109 - Added language settings lookups and user/pass variable standardization
# 150723-1713 - Added ajax logging # 150723-1713 - Added ajax logging
# 170526-2234 - Added additional variable filtering
# #
$version = '2.10-16'; $version = '2.14-17';
$build = '150723-1713'; $build = '170526-2234';
$php_script = 'live_exten_check.php'; $php_script = 'live_exten_check.php';
$SSagent_debug_logging=0; $SSagent_debug_logging=0;
$startMS = microtime(); $startMS = microtime();
@@ -70,10 +71,14 @@ if (isset($_GET["favorites_count"])) {$favorites_count=$_GET["favorites_count
if (isset($_GET["favorites_list"])) {$favorites_list=$_GET["favorites_list"];} if (isset($_GET["favorites_list"])) {$favorites_list=$_GET["favorites_list"];}
elseif (isset($_POST["favorites_list"])) {$favorites_list=$_POST["favorites_list"];} elseif (isset($_POST["favorites_list"])) {$favorites_list=$_POST["favorites_list"];}
# variable filtering
$user=preg_replace("/\'|\"|\\\\|;| /","",$user); $user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name); $session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip); $server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$exten = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$exten);
$protocol = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$protocol);
$favorites_list = preg_replace("/\'|\"|\\\\|;| /","",$favorites_list);
# default optional vars if not set # default optional vars if not set
if (!isset($format)) {$format="text";} if (!isset($format)) {$format="text";}
www/agc/manager_send.php
+12 -2
View File
@@ -136,10 +136,11 @@
# 161217-0823 - Added parked_calls_recent table entries for better handling of parked calls # 161217-0823 - Added parked_calls_recent table entries for better handling of parked calls
# 170317-2214 - Added more debugging output # 170317-2214 - Added more debugging output
# 170513-1616 - Added more debugging output # 170513-1616 - Added more debugging output
# 170526-2241 - Added additional variable filtering
# #
$version = '2.14-83'; $version = '2.14-84';
$build = '170513-1616'; $build = '170526-2241';
$php_script = 'manager_send.php'; $php_script = 'manager_send.php';
$mel=1; # Mysql Error Log enabled = 1 $mel=1; # Mysql Error Log enabled = 1
$mysql_log_count=142; $mysql_log_count=142;
@@ -249,10 +250,19 @@ header ("Content-type: text/html; charset=utf-8");
header ("Cache-Control: no-cache, must-revalidate"); // HTTP/1.1 header ("Cache-Control: no-cache, must-revalidate"); // HTTP/1.1
header ("Pragma: no-cache"); // HTTP/1.0 header ("Pragma: no-cache"); // HTTP/1.0
# filter variables
$user=preg_replace("/\'|\"|\\\\|;| /","",$user); $user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name); $session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip); $server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$campaign = preg_replace('/[^-_0-9a-zA-Z]/','',$campaign);
$phone_number = preg_replace('/[^-_0-9a-zA-Z]/','',$phone_number);
$lead_id = preg_replace('/[^0-9]/','',$lead_id);
$session_id = preg_replace('/[^0-9]/','',$session_id);
$uniqueid = preg_replace('/[^-_\.0-9a-zA-Z]/','',$uniqueid);
$exten = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$exten);
$extension = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$extension);
$protocol = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$protocol);
# default optional vars if not set # default optional vars if not set
if (!isset($ACTION)) {$ACTION="Originate";} if (!isset($ACTION)) {$ACTION="Originate";}
www/agc/park_calls_display.php
+8 -4
View File
@@ -1,7 +1,7 @@
<?php <?php
# park_calls_display.php version 2.12 # park_calls_display.php version 2.14
# #
# Copyright (C) 2015 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2 # Copyright (C) 2017 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# #
# This script is designed purely to send the details on the parked calls on the server # This script is designed purely to send the details on the parked calls on the server
# This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table # This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table
@@ -30,10 +30,11 @@
# 141118-1237 - Formatting changes for QXZ output # 141118-1237 - Formatting changes for QXZ output
# 141216-2105 - Added language settings lookups and user/pass variable standardization # 141216-2105 - Added language settings lookups and user/pass variable standardization
# 150723-1712 - Added ajax logging # 150723-1712 - Added ajax logging
# 170526-2244 - Added additional variable filtering
# #
$version = '0.0.12'; $version = '2.14-13';
$build = '150723-1712'; $build = '170526-2244';
$php_script = 'park_calls_display.php'; $php_script = 'park_calls_display.php';
$SSagent_debug_logging=0; $SSagent_debug_logging=0;
$startMS = microtime(); $startMS = microtime();
@@ -57,10 +58,13 @@ if (isset($_GET["exten"])) {$exten=$_GET["exten"];}
if (isset($_GET["protocol"])) {$protocol=$_GET["protocol"];} if (isset($_GET["protocol"])) {$protocol=$_GET["protocol"];}
elseif (isset($_POST["protocol"])) {$protocol=$_POST["protocol"];} elseif (isset($_POST["protocol"])) {$protocol=$_POST["protocol"];}
# variable filtering
$user=preg_replace("/\'|\"|\\\\|;| /","",$user); $user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name); $session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip); $server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$exten = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$exten);
$protocol = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$protocol);
# default optional vars if not set # default optional vars if not set
if (!isset($format)) {$format="text";} if (!isset($format)) {$format="text";}
www/agc/phone_only.php
+1
View File
@@ -172,6 +172,7 @@ $DS='-';
$date = date("r"); $date = date("r");
$ip = getenv("REMOTE_ADDR"); $ip = getenv("REMOTE_ADDR");
$browser = getenv("HTTP_USER_AGENT"); $browser = getenv("HTTP_USER_AGENT");
$browser=preg_replace("/\'|\"|\\\\/","",$browser);
$script_name = getenv("SCRIPT_NAME"); $script_name = getenv("SCRIPT_NAME");
$server_name = getenv("SERVER_NAME"); $server_name = getenv("SERVER_NAME");
$server_port = getenv("SERVER_PORT"); $server_port = getenv("SERVER_PORT");
www/agc/update_cf_ivr.php
+8 -1
View File
@@ -1,7 +1,7 @@
<?php <?php
# update_cf_ivr.php # update_cf_ivr.php
# #
# Copyright (C) 2015 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2 # Copyright (C) 2017 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# #
# This script is part of the API group and any modifications of data are # This script is part of the API group and any modifications of data are
# logged to the vicidial_api_log table. # logged to the vicidial_api_log table.
@@ -10,6 +10,7 @@
# #
# CHANGES # CHANGES
# 150814-1441 - First Build # 150814-1441 - First Build
# 170526-2319 - Added additional variable filtering
# #
$api_script = 'update_cf_ivr'; $api_script = 'update_cf_ivr';
@@ -55,8 +56,14 @@ $search_value='';
$match_found=0; $match_found=0;
$k=0; $k=0;
# filter variables
$user=preg_replace("/\'|\"|\\\\|;| /","",$user); $user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$caller_id = preg_replace('/[^-_0-9a-zA-Z]/', '', $caller_id);
$lead_id = preg_replace('/[^_0-9]/', '', $lead_id);
$list_id = preg_replace('/[^_0-9]/', '', $list_id);
$field = preg_replace('/[^-_0-9a-zA-Z]/', '', $field);
$value = preg_replace("/\'|\"|\\\\|;| /","",$value);
############################################# #############################################
##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP ##### ##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP #####
www/agc/vdc_db_query.php
+11 -2
View File
@@ -429,10 +429,11 @@
# 170401-1437 - Added translation of callbacks statuses, issue #1006 # 170401-1437 - Added translation of callbacks statuses, issue #1006
# 170429-0835 - Added callback_display_days option # 170429-0835 - Added callback_display_days option
# 170504-1056 - Added start_call_url to manual-dial calls # 170504-1056 - Added start_call_url to manual-dial calls
# 170526-2327 - Added additional variable filtering
# #
$version = '2.14-323'; $version = '2.14-324';
$build = '170504-1056'; $build = '170526-2327';
$php_script = 'vdc_db_query.php'; $php_script = 'vdc_db_query.php';
$mel=1; # Mysql Error Log enabled = 1 $mel=1; # Mysql Error Log enabled = 1
$mysql_log_count=684; $mysql_log_count=684;
@@ -926,18 +927,26 @@ if ($non_latin < 1)
$length_in_sec = preg_replace("/[^0-9]/","",$length_in_sec); $length_in_sec = preg_replace("/[^0-9]/","",$length_in_sec);
$phone_code = preg_replace("/[^0-9]/","",$phone_code); $phone_code = preg_replace("/[^0-9]/","",$phone_code);
$phone_number = preg_replace("/[^0-9a-zA-Z]/","",$phone_number); $phone_number = preg_replace("/[^0-9a-zA-Z]/","",$phone_number);
$status = preg_replace("/[^-_0-9a-zA-Z]/","",$status);
} }
else else
{ {
$user = preg_replace("/\'|\"|\\\\|;/","",$user); $user = preg_replace("/\'|\"|\\\\|;/","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$orig_pass = preg_replace("/\'|\"|\\\\|;/","",$orig_pass); $orig_pass = preg_replace("/\'|\"|\\\\|;/","",$orig_pass);
$status = preg_replace("/\'|\"|\\\\|;/","",$status);
} }
$session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name); $session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip); $server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$alt_phone = preg_replace("/\s/","",$alt_phone); $alt_phone = preg_replace("/\s/","",$alt_phone);
$phone_number = preg_replace("/\s/","",$phone_number); $phone_number = preg_replace("/\s/","",$phone_number);
$campaign = preg_replace("/\'|\"|\\\\|;/","",$campaign);
$closer_choice = preg_replace("/\'|\"|\\\\|;/","",$closer_choice);
$lead_id = preg_replace('/[^0-9]/','',$lead_id);
$list_id = preg_replace('/[^0-9]/','',$list_id);
$conf_exten = preg_replace('/[^-_\.0-9a-zA-Z]/','',$conf_exten);
$uniqueid = preg_replace('/[^-_\.0-9a-zA-Z]/','',$uniqueid);
# default optional vars if not set # default optional vars if not set
if (!isset($format)) {$format="text";} if (!isset($format)) {$format="text";}
www/agc/vdc_email_display.php
+9 -3
View File
@@ -1,7 +1,7 @@
<?php <?php
# vdc_email_display.php - VICIDIAL agent email display script # vdc_email_display.php - VICIDIAL agent email display script
# #
# Copyright (C) 2015 Matt Florell, Joe Johnson <vicidial@gmail.com> LICENSE: AGPLv2 # Copyright (C) 2017 Matt Florell, Joe Johnson <vicidial@gmail.com> LICENSE: AGPLv2
# #
# This page displays any incoming emails in the Vicidial user interface. It # This page displays any incoming emails in the Vicidial user interface. It
# also allows the user to download and view any attachments sent in the email, # also allows the user to download and view any attachments sent in the email,
@@ -21,10 +21,11 @@
# 141128-0850 - Code cleanup for QXZ functions # 141128-0850 - Code cleanup for QXZ functions
# 141216-2117 - Added language settings lookups and user/pass variable standardization # 141216-2117 - Added language settings lookups and user/pass variable standardization
# 150603-1541 - Fixed email attachments issue # 150603-1541 - Fixed email attachments issue
# 170526-2330 - Added additional variable filtering
# #
$version = '2.12-11'; $version = '2.14-12';
$build = '150603-1541'; $build = '170526-2330';
require_once("dbconnect_mysqli.php"); require_once("dbconnect_mysqli.php");
require_once("functions.php"); require_once("functions.php");
@@ -104,6 +105,11 @@ $IFRAME=0;
$user = preg_replace("/\'|\"|\\\\|;| /","",$user); $user = preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass = preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass = preg_replace("/\'|\"|\\\\|;| /","",$pass);
$campaign = preg_replace("/\'|\"|\\\\|;/","",$campaign);
$attachment_id = preg_replace("/[^0-9]/","",$attachment_id);
$lead_id = preg_replace('/[^0-9]/','',$lead_id);
$email_row_id = preg_replace('/[^0-9]/','',$email_row_id);
$reply_to_address = preg_replace("/\'|\"|\\\\|;/","",$reply_to_address);
############################################# #############################################
##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP ##### ##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP #####
www/agc/vdc_form_display.php
+6
View File
@@ -226,6 +226,12 @@ $IFRAME=0;
$user = preg_replace("/\'|\"|\\\\|;| /","",$user); $user = preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass = preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass = preg_replace("/\'|\"|\\\\|;| /","",$pass);
$lead_id = preg_replace('/[^0-9]/', '', $lead_id);
$list_id = preg_replace('/[^0-9]/', '', $list_id);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$session_id = preg_replace('/[^0-9]/','',$session_id);
$uniqueid = preg_replace('/[^-_\.0-9a-zA-Z]/','',$uniqueid);
$campaign = preg_replace('/[^-_0-9a-zA-Z]/','',$campaign);
############################################# #############################################
##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP ##### ##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP #####
www/agc/vdc_script_display.php
+11 -2
View File
@@ -34,10 +34,11 @@
# 150923-2028 - Added DID custom variables # 150923-2028 - Added DID custom variables
# 160818-1226 - Added MANUALDIALLINK option # 160818-1226 - Added MANUALDIALLINK option
# 170317-2315 - Fixed in-group list script override issue, added debug # 170317-2315 - Fixed in-group list script override issue, added debug
# 170526-2343 - Added additional variable filtering
# #
$version = '2.14-28'; $version = '2.14-29';
$build = '170317-2315'; $build = '170526-2343';
require_once("dbconnect_mysqli.php"); require_once("dbconnect_mysqli.php");
require_once("functions.php"); require_once("functions.php");
@@ -260,6 +261,14 @@ $IFRAMEencode=1;
$user=preg_replace("/\'|\"|\\\\|;| /","",$user); $user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$orig_pass = preg_replace("/\'|\"|\\\\|;| /","",$orig_pass); $orig_pass = preg_replace("/\'|\"|\\\\|;| /","",$orig_pass);
$lead_id = preg_replace('/[^0-9]/', '', $lead_id);
$list_id = preg_replace('/[^0-9]/', '', $list_id);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$session_id = preg_replace('/[^0-9]/','',$session_id);
$uniqueid = preg_replace('/[^-_\.0-9a-zA-Z]/','',$uniqueid);
$campaign = preg_replace('/[^-_0-9a-zA-Z]/','',$campaign);
$group = preg_replace('/[^-_0-9a-zA-Z]/','',$group);
$session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name);
############################################# #############################################
##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP ##### ##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP #####
www/agc/vdc_script_dispo_example.php
+11 -3
View File
@@ -1,7 +1,7 @@
<?php <?php
# vdc_script_dispo_example.php # vdc_script_dispo_example.php
# #
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2 # Copyright (C) 2017 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# #
# This script is designed to be used in the SCRIPT tab in an IFRAME and will not submit unless a specific field is filled in # This script is designed to be used in the SCRIPT tab in an IFRAME and will not submit unless a specific field is filled in
# #
@@ -19,10 +19,11 @@
# 130802-1036 - Changed to PHP mysqli functions # 130802-1036 - Changed to PHP mysqli functions
# 140811-0832 - Changed to use QXZ function for echoing text # 140811-0832 - Changed to use QXZ function for echoing text
# 141216-2133 - Added language settings lookups and user/pass variable standardization # 141216-2133 - Added language settings lookups and user/pass variable standardization
# 170526-2345 - Added additional variable filtering
# #
$version = '2.10-7'; $version = '2.14-8';
$build = '141216-2133'; $build = '170526-2345';
require_once("dbconnect_mysqli.php"); require_once("dbconnect_mysqli.php");
require_once("functions.php"); require_once("functions.php");
@@ -251,6 +252,13 @@ if (strlen($call_date) < 1)
$user=preg_replace("/\'|\"|\\\\|;| /","",$user); $user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$list_id = preg_replace('/[^0-9]/', '', $list_id);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$session_id = preg_replace('/[^0-9]/','',$session_id);
$uniqueid = preg_replace('/[^-_\.0-9a-zA-Z]/','',$uniqueid);
$campaign = preg_replace('/[^-_0-9a-zA-Z]/','',$campaign);
$group = preg_replace('/[^-_0-9a-zA-Z]/','',$group);
$session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name);
############################################# #############################################
##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP ##### ##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP #####
www/agc/vdc_script_notes.php
+11 -4
View File
@@ -1,7 +1,7 @@
<?php <?php
# vdc_script_notes.php # vdc_script_notes.php
# #
# Copyright (C) 2014 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2 # Copyright (C) 2017 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# #
# This script is designed open in the SCRIPT tab in the agent interface through # This script is designed open in the SCRIPT tab in the agent interface through
# an IFRAME. It will create a new record for every SUBMIT # an IFRAME. It will create a new record for every SUBMIT
@@ -17,10 +17,11 @@
# 130802-1037 - Changed to PHP mysqli functions # 130802-1037 - Changed to PHP mysqli functions
# 140810-2113 - Changed to use QXZ function for echoing text # 140810-2113 - Changed to use QXZ function for echoing text
# 141216-2132 - Added language settings lookups and user/pass variable standardization # 141216-2132 - Added language settings lookups and user/pass variable standardization
# 170526-2345 - Added additional variable filtering
# #
$version = '2.10-7'; $version = '2.14-8';
$build = '141216-2132'; $build = '170526-2345';
require_once("dbconnect_mysqli.php"); require_once("dbconnect_mysqli.php");
require_once("functions.php"); require_once("functions.php");
@@ -217,9 +218,15 @@ $agents='@agents';
if (strlen($call_date) < 1) if (strlen($call_date) < 1)
{$call_date = $NOW_TIME;} {$call_date = $NOW_TIME;}
$user=preg_replace("/\'|\"|\\\\|;| /","",$user); $user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$list_id = preg_replace('/[^0-9]/', '', $list_id);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$session_id = preg_replace('/[^0-9]/','',$session_id);
$uniqueid = preg_replace('/[^-_\.0-9a-zA-Z]/','',$uniqueid);
$campaign = preg_replace('/[^-_0-9a-zA-Z]/','',$campaign);
$group = preg_replace('/[^-_0-9a-zA-Z]/','',$group);
$session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name);
############################################# #############################################
##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP ##### ##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP #####
www/agc/vicidial-grey.php
+1
View File
@@ -754,6 +754,7 @@ $DS='-';
$date = date("r"); $date = date("r");
$ip = getenv("REMOTE_ADDR"); $ip = getenv("REMOTE_ADDR");
$browser = getenv("HTTP_USER_AGENT"); $browser = getenv("HTTP_USER_AGENT");
$browser=preg_replace("/\'|\"|\\\\/","",$browser);
$script_name = getenv("SCRIPT_NAME"); $script_name = getenv("SCRIPT_NAME");
$server_name = getenv("SERVER_NAME"); $server_name = getenv("SERVER_NAME");
$server_port = getenv("SERVER_PORT"); $server_port = getenv("SERVER_PORT");
www/agc/vicidial.php
+1
View File
@@ -847,6 +847,7 @@ $DS='-';
$date = date("r"); $date = date("r");
$ip = getenv("REMOTE_ADDR"); $ip = getenv("REMOTE_ADDR");
$browser = getenv("HTTP_USER_AGENT"); $browser = getenv("HTTP_USER_AGENT");
$browser=preg_replace("/\'|\"|\\\\/","",$browser);
$script_name = getenv("SCRIPT_NAME"); $script_name = getenv("SCRIPT_NAME");
$server_name = getenv("SERVER_NAME"); $server_name = getenv("SERVER_NAME");
$server_port = getenv("SERVER_PORT"); $server_port = getenv("SERVER_PORT");
www/agc/voicemail_check.php
+6 -4
View File
@@ -1,7 +1,7 @@
<?php <?php
# voicemail_check.php version 2.12 # voicemail_check.php version 2.14
# #
# Copyright (C) 2015 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2 # Copyright (C) 2017 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# #
# This script is designed purely to check whether the voicemail box on the server defined has new and old messages # This script is designed purely to check whether the voicemail box on the server defined has new and old messages
# This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table # This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table
@@ -30,10 +30,11 @@
# 141118-1240 - Formatting changes for QXZ output # 141118-1240 - Formatting changes for QXZ output
# 141216-1902 - Added language settings lookups and user/pass variable standardization # 141216-1902 - Added language settings lookups and user/pass variable standardization
# 150723-1711 - Added ajax logging # 150723-1711 - Added ajax logging
# 170526-2351 - Added additional variable filtering
# #
$version = '0.0.13'; $version = '2.14-14';
$build = '150723-1711'; $build = '170526-2351';
$php_script = 'voicemail_check.php'; $php_script = 'voicemail_check.php';
$SSagent_debug_logging=0; $SSagent_debug_logging=0;
$startMS = microtime(); $startMS = microtime();
@@ -59,6 +60,7 @@ $user=preg_replace("/\'|\"|\\\\|;| /","",$user);
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
$session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name); $session_name = preg_replace("/\'|\"|\\\\|;/","",$session_name);
$server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip); $server_ip = preg_replace("/\'|\"|\\\\|;/","",$server_ip);
$vmail_box = preg_replace("/\'|\"|\\\\|;/","",$vmail_box);
# default optional vars if not set # default optional vars if not set
if (!isset($format)) {$format="text";} if (!isset($format)) {$format="text";}
www/vicidial/AST_API_log_report.php
+3
View File
@@ -203,6 +203,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_CLOSER_service_level.php
+3
View File
@@ -198,6 +198,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_CLOSERstats.php
+3
View File
@@ -348,6 +348,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_CLOSERstats_v2.php
+3
View File
@@ -357,6 +357,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_CLOSERsummary_hourly.php
+3
View File
@@ -215,6 +215,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_DIDstats.php
+3
View File
@@ -291,6 +291,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_GROUP_ALIASstats.php
+3
View File
@@ -145,6 +145,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_IVRfilter.php
+3
View File
@@ -176,6 +176,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_IVRstats.php
+3
View File
@@ -210,6 +210,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_LAGGED_log_report.php
+3
View File
@@ -159,6 +159,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_LISTS_campaign_stats.php
+3
View File
@@ -189,6 +189,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_LISTS_pass_report.php
+3
View File
@@ -182,6 +182,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_LISTS_stats.php
+3
View File
@@ -160,6 +160,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_LIST_UPDATEstats.php
+3
View File
@@ -149,6 +149,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_OUTBOUNDsummary_interval.php
+3
View File
@@ -242,6 +242,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_VDADstats.php
+3
View File
@@ -266,6 +266,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_VICIDIAL_hopperlist.php
+3
View File
@@ -162,6 +162,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_VICIDIAL_ingrouplist.php
+3
View File
@@ -139,6 +139,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_agentDIDstats.php
+3
View File
@@ -260,6 +260,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_agent_days_detail.php
+3
View File
@@ -200,6 +200,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_agent_days_time.php
+3
View File
@@ -178,6 +178,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_agent_debug_log_report.php
+3
View File
@@ -149,6 +149,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_agent_performance.php
+5 -3
View File
@@ -16,6 +16,7 @@
# 141114-0909 - Finalized adding QXZ translation to all admin files # 141114-0909 - Finalized adding QXZ translation to all admin files
# 141230-1524 - Added code for on-the-fly language translations display # 141230-1524 - Added code for on-the-fly language translations display
# 170409-1534 - Added IP List validation code # 170409-1534 - Added IP List validation code
# 170527-0102 - Added variable filtering
# #
require("dbconnect_mysqli.php"); require("dbconnect_mysqli.php");
@@ -27,13 +28,13 @@ $PHP_SELF=$_SERVER['PHP_SELF'];
if (isset($_GET["group"])) {$group=$_GET["group"];} if (isset($_GET["group"])) {$group=$_GET["group"];}
elseif (isset($_POST["group"])) {$group=$_POST["group"];} elseif (isset($_POST["group"])) {$group=$_POST["group"];}
if (isset($_GET["query_date"])) {$query_date=$_GET["query_date"];} if (isset($_GET["query_date"])) {$query_date=$_GET["query_date"];}
elseif (isset($_POST["query_date"])) {$query_date=$_POST["query_date"];} elseif (isset($_POST["query_date"])) {$query_date=$_POST["query_date"];}
if (isset($_GET["shift"])) {$shift=$_GET["shift"];} if (isset($_GET["shift"])) {$shift=$_GET["shift"];}
elseif (isset($_POST["shift"])) {$shift=$_POST["shift"];} elseif (isset($_POST["shift"])) {$shift=$_POST["shift"];}
if (isset($_GET["submit"])) {$submit=$_GET["submit"];} if (isset($_GET["submit"])) {$submit=$_GET["submit"];}
elseif (isset($_POST["submit"])) {$submit=$_POST["submit"];} elseif (isset($_POST["submit"])) {$submit=$_POST["submit"];}
if (isset($_GET["SUBMIT"])) {$SUBMIT=$_GET["SUBMIT"];} if (isset($_GET["SUBMIT"])) {$SUBMIT=$_GET["SUBMIT"];}
elseif (isset($_POST["SUBMIT"])) {$SUBMIT=$_POST["SUBMIT"];} elseif (isset($_POST["SUBMIT"])) {$SUBMIT=$_POST["SUBMIT"];}
############################################# #############################################
##### START SYSTEM_SETTINGS LOOKUP ##### ##### START SYSTEM_SETTINGS LOOKUP #####
@@ -62,6 +63,7 @@ else
$PHP_AUTH_USER = preg_replace("/'|\"|\\\\|;/","",$PHP_AUTH_USER); $PHP_AUTH_USER = preg_replace("/'|\"|\\\\|;/","",$PHP_AUTH_USER);
} }
$group = preg_replace("/'|\"|\\\\|;/","",$group); $group = preg_replace("/'|\"|\\\\|;/","",$group);
$query_date = preg_replace("/'|\"|\\\\|;/","",$query_date);
$stmt="SELECT selected_language from vicidial_users where user='$PHP_AUTH_USER';"; $stmt="SELECT selected_language from vicidial_users where user='$PHP_AUTH_USER';";
if ($DB) {echo "|$stmt|\n";} if ($DB) {echo "|$stmt|\n";}
www/vicidial/AST_agent_performance_detail.php
+3
View File
@@ -239,6 +239,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_agent_performance_detail_SALES.php
+3
View File
@@ -177,6 +177,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_agent_status_detail.php
+3
View File
@@ -175,6 +175,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_agent_time_detail.php
+3
View File
@@ -255,6 +255,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_agent_time_sheet.php
+3
View File
@@ -189,6 +189,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_agent_time_sheet_archive.php
+3
View File
@@ -147,6 +147,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_agent_timeclock_detail.php
+3
View File
@@ -171,6 +171,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_campaign_status_list_report.php
+3
View File
@@ -196,6 +196,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_carrier_log_report.php
+3
View File
@@ -154,6 +154,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_chat_log_report.php
+3
View File
@@ -175,6 +175,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_dial_log_report.php
+3
View File
@@ -273,6 +273,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_dialer_inventory_report.php
+3
View File
@@ -177,6 +177,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_email_log_report.php
+3
View File
@@ -213,6 +213,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_hangup_cause_report.php
+3
View File
@@ -314,6 +314,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_inbound_daily_report.php
+3
View File
@@ -202,6 +202,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_inbound_forecasting.php
+3
View File
@@ -279,6 +279,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_parkstats.php
+3
View File
@@ -150,6 +150,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_performance_comparison_report.php
+3
View File
@@ -189,6 +189,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_recording_log_report.php
+3
View File
@@ -208,6 +208,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_rt_monitor_log_report.php
+3
View File
@@ -206,6 +206,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_server_performance.php
+3
View File
@@ -162,6 +162,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) if (preg_match("/443/i",$LOGserver_port))
{$HTTPprotocol = 'https://';} {$HTTPprotocol = 'https://';}
else else
www/vicidial/AST_team_performance_detail.php
+3
View File
@@ -199,6 +199,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_url_log_report.php
+3
View File
@@ -160,6 +160,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_user_group_hourly_detail.php
+3
View File
@@ -181,6 +181,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_usergroup_login_report.php
+3
View File
@@ -179,6 +179,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_vdad_debug_log_report.php
+3
View File
@@ -158,6 +158,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/AST_webserver_url_report.php
+3
View File
@@ -162,6 +162,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/Erlang_report.php
+3
View File
@@ -277,6 +277,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/admin.php
+6 -2
View File
@@ -4123,12 +4123,13 @@ else
# 170429-0807 - Added campaign setting callback_display_days # 170429-0807 - Added campaign setting callback_display_days
# 170430-1001 - Added three_way_record_stop and hangup_xfer_record_start campaign settings # 170430-1001 - Added three_way_record_stop and hangup_xfer_record_start campaign settings
# 170516-0632 - Added Real-Time Monitoring Log Report # 170516-0632 - Added Real-Time Monitoring Log Report
# 170527-0041 - Added filtering of browser details before logging
# #
# make sure you have added a user to the vicidial_users MySQL table with at least user_level 9 to access this page the first time # make sure you have added a user to the vicidial_users MySQL table with at least user_level 9 to access this page the first time
$admin_version = '2.14-615a'; $admin_version = '2.14-616a';
$build = '170516-0632'; $build = '170527-0041';
$STARTtime = date("U"); $STARTtime = date("U");
$SQLdate = date("Y-m-d H:i:s"); $SQLdate = date("Y-m-d H:i:s");
@@ -5059,6 +5060,9 @@ if ( ($ADD==999993) or ($ADD==999992) or ($ADD==730000000000000) or ($ADD==83000
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/asterisk_debug.php
+3
View File
@@ -146,6 +146,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/call_report_export.php
+3
View File
@@ -268,6 +268,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/call_report_export_carrier.php
+3
View File
@@ -193,6 +193,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/called_counts_multilist_report.php
+3
View File
@@ -211,6 +211,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/campaign_debug.php
+3
View File
@@ -153,6 +153,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/fcstats.php
+3
View File
@@ -209,6 +209,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/fcstats_detail.php
+3
View File
@@ -223,6 +223,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/group_hourly_stats.php
+3
View File
@@ -151,6 +151,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/lead_report_export.php
+3
View File
@@ -244,6 +244,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/list_download.php
+3
View File
@@ -157,6 +157,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/medialog_inventory_report.php
+3
View File
@@ -210,6 +210,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/realtime_report.php
+3
View File
@@ -388,6 +388,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/sph_report.php
+3
View File
@@ -169,6 +169,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/timeclock_report.php
+3
View File
@@ -193,6 +193,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/timeclock_status.php
+3
View File
@@ -185,6 +185,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/user_stats.php
+3
View File
@@ -332,6 +332,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/user_status.php
+3
View File
@@ -246,6 +246,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/voice_lab.php
+3
View File
@@ -147,6 +147,9 @@ $LOGserver_name = getenv("SERVER_NAME");
$LOGserver_port = getenv("SERVER_PORT"); $LOGserver_port = getenv("SERVER_PORT");
$LOGrequest_uri = getenv("REQUEST_URI"); $LOGrequest_uri = getenv("REQUEST_URI");
$LOGhttp_referer = getenv("HTTP_REFERER"); $LOGhttp_referer = getenv("HTTP_REFERER");
$LOGbrowser=preg_replace("/\'|\"|\\\\/","",$LOGbrowser);
$LOGrequest_uri=preg_replace("/\'|\"|\\\\/","",$LOGrequest_uri);
$LOGhttp_referer=preg_replace("/\'|\"|\\\\/","",$LOGhttp_referer);
if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';} if (preg_match("/443/i",$LOGserver_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';} else {$HTTPprotocol = 'http://';}
if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';} if (($LOGserver_port == '80') or ($LOGserver_port == '443') ) {$LOGserver_port='';}
www/vicidial/web_form_forward.php
+4 -2
View File
@@ -1,7 +1,7 @@
<?php <?php
# web_form_forward.php - custom script forward agent to web page and alter vars # web_form_forward.php - custom script forward agent to web page and alter vars
# #
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2 # Copyright (C) 2017 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# #
# You will need to customize this to your needs # You will need to customize this to your needs
# #
@@ -9,12 +9,15 @@
# 80626-1121 - First Build # 80626-1121 - First Build
# 90508-0644 - Changed to PHP long tags # 90508-0644 - Changed to PHP long tags
# 130902-0757 - Changed to mysqli PHP functions # 130902-0757 - Changed to mysqli PHP functions
# 170527-0003 - Added variable filtering
# #
if (isset($_GET["phone_number"])) {$phone_number=$_GET["phone_number"];} if (isset($_GET["phone_number"])) {$phone_number=$_GET["phone_number"];}
if (isset($_GET["source_id"])) {$source_id=$_GET["source_id"];} if (isset($_GET["source_id"])) {$source_id=$_GET["source_id"];}
if (isset($_GET["user"])) {$user=$_GET["user"];} if (isset($_GET["user"])) {$user=$_GET["user"];}
$user=preg_replace("/\'|\"|\\\\|;| /","",$user);
require("dbconnect_mysqli.php"); require("dbconnect_mysqli.php");
$stmt="SELECT full_name from vicidial_users where user='$user';"; $stmt="SELECT full_name from vicidial_users where user='$user';";
@@ -35,5 +38,4 @@ echo"<BODY BGCOLOR=#FFFFFF marginheight=0 marginwidth=0 leftmargin=0 topmargin=0
echo"<a href=\"$URL\">click here to continue. . .</a>\n"; echo"<a href=\"$URL\">click here to continue. . .</a>\n";
echo"</BODY></HTML>\n"; echo"</BODY></HTML>\n";
?> ?>