Added ability to use .agi scripts in Call Menu prompt. Also added cm_date.agi script to say date with options

Converted ereg to preg in the agc agent interface PHP scripts

git-svn-id: svn://192.168.202.10@1945 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2013-03-28 04:52:48 +00:00
parent 47569211f5
commit 4eb3174583
31 changed files with 1267 additions and 1221 deletions
+5
View File
@@ -170,6 +170,11 @@ OTHER CHANGES:
35. Added System Settings option to disable Add/Copy admin functions for level
8 users.
36. Added ability to use .agi scripts in Call Menu prompt. Also added
cm_date.agi script to say date with options
37. Converted ereg to preg in the agc agent interface PHP scripts
+22 -2
View File
@@ -80,6 +80,7 @@
# 130103-0808 - Added CLI options for delay to be used with auto-dial and FILL processes
# 130108-1657 - Changes for Asterisk 1.8 compatibility
# 130227-1605 - Added --fill-staggered option for the AST_VDauto_dialFILL script
# 130326-1754 - Added ability to use .agi scripts as part of Call Menu Prompt
#
$DB=0; # Debug flag
@@ -2494,12 +2495,31 @@ if ( ($active_asterisk_server =~ /Y/) && ($generate_vicidial_conf =~ /Y/) && ($r
foreach(@menu_prompts_array)
{
if (length($menu_prompts_array[$w])>0)
{$menu_prompt_ext .= "exten => s,n,Background($menu_prompts_array[$w])\n";}
{
if ($menu_prompts_array[$w] =~ /\.agi/)
{
$menu_prompt_ext .= "exten => s,n,AGI($menu_prompts_array[$w])\n";
}
else
{
$menu_prompt_ext .= "exten => s,n,Background($menu_prompts_array[$w])\n";
}
}
$w++;
}
}
else
{$menu_prompt_ext .= "exten => s,n,Background($menu_prompt[$i])\n";}
{
if ($menu_prompt[$i] =~ /\.agi/)
{
$menu_prompt_ext .= "exten => s,n,AGI($menu_prompt[$i])\n";
}
else
{
$menu_prompt_ext .= "exten => s,n,Background($menu_prompt[$i])\n";
}
}
if ($time_check_route =~ /AGI/)
{
@@ -183,6 +183,7 @@ If CPD AMD Action is set to CALLMENU, then this is the Call Menu that the call w
Level 8 Disable Add||
This setting if enabled will prevent any level 8 user from adding or copying any record in the system, no matter what their user settings are. Excluded from these restrictions are the ability to add DNC and Filter Phone Groups numbers and the Add a New Lead page. Default is 0 for disabled||
You do not have permission to add records on this system||
These options allows you to limit the viewable callbacks in the agent callback alert section on the agent screen, to only LIVE callbacks. LIVE callbacks are user-only scheduled callbacks that have hit their trigger date and time. ACTIVE call backs are user-only callbacks that are active in the system but have not yet triggered. You can view both ACTIVE and LIVE callbacks by selecting ALL_ACTIVE. Default is ALL_ACTIVE||
############################################################ CLIENT
+13 -12
View File
@@ -5,7 +5,7 @@
#
# <iframe src="/agc/SCRIPT_busy_button.php?lead_id=--A--lead_id--B--&list_id=--A--list_id--B--&user=--A--user--B--&campaign_id=--A--campaign_id--B--&phone_number=--A--phone_number--B--&vendor_id=--A--vendor_lead_code--B--" style="width:400;height:40;background-color:transparent;" scrolling="no" frameborder="0" allowtransparency="true" id="popupFrame" name="popupFrame" width="400" height="30" STYLE="z-index:17"> </iframe>
#
# Copyright (C) 2009 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
########## DB SCHEMA
# CREATE TABLE qr_busy_button_log (
@@ -25,6 +25,7 @@
# CHANGES:
# 90408-0618 - First Build
# 90508-0727 - Changed to PHP long tags
# 130328-0026 - Converted ereg to preg functions
#
if (isset($_GET["button_id"])) {$button_id=$_GET["button_id"];}
@@ -47,19 +48,19 @@ if (isset($_GET["epoch"])) {$epoch=$_GET["epoch"];}
elseif (isset($_POST["epoch"])) {$epoch=$_POST["epoch"];}
### security strip all non-alphanumeric characters out of the variables ###
$button_id=ereg_replace("[^0-9]","",$button_id);
$lead_id=ereg_replace("[^0-9]","",$lead_id);
$list_id=ereg_replace("[^0-9]","",$list_id);
$phone_number=ereg_replace("[^0-9]","",$phone_number);
$vendor_id = ereg_replace("[^- \:\/\_0-9a-zA-Z]","",$vendor_id);
$user=ereg_replace("[^0-9a-zA-Z]","",$user);
$campaign = ereg_replace("[^-\_0-9a-zA-Z]","",$campaign);
$stage = ereg_replace("[^-\_0-9a-zA-Z]","",$stage);
$epoch = ereg_replace("[^0-9]","",$epoch);
$button_id=preg_replace("/[^0-9]/","",$button_id);
$lead_id=preg_replace("/[^0-9]/","",$lead_id);
$list_id=preg_replace("/[^0-9]/","",$list_id);
$phone_number=preg_replace("/[^0-9]/","",$phone_number);
$vendor_id = preg_replace("/[^- \:\/\_0-9a-zA-Z]/","",$vendor_id);
$user=preg_replace("/[^0-9a-zA-Z]/","",$user);
$campaign = preg_replace("/[^-\_0-9a-zA-Z]/","",$campaign);
$stage = preg_replace("/[^-\_0-9a-zA-Z]/","",$stage);
$epoch = preg_replace("/[^0-9]/","",$epoch);
require("dbconnect.php");
if (eregi("CLICK",$stage))
if (preg_match("/CLICK/i",$stage))
{
$epochNOW = date("U");
$click_seconds = ($epochNOW - $epoch);
@@ -81,7 +82,7 @@ else
$script_name = getenv("SCRIPT_NAME");
$server_name = getenv("SERVER_NAME");
$server_port = getenv("SERVER_PORT");
if (eregi("443",$server_port)) {$HTTPprotocol = 'https://';}
if (preg_match("/443/i",$server_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';}
if (($server_port == '80') or ($server_port == '443') ) {$server_port='';}
else {$server_port = "$CL$server_port";}
+11 -10
View File
@@ -1,13 +1,14 @@
<?php
# SCRIPT_multirecording_AJAX.php - script that stops/starts recordings being made over a forced-recording (ALLFORCE) call
#
# Copyright (C) 2012 Joe Johnson <joej@vicidial.com> LICENSE: AGPLv2
# Copyright (C) 2013 Joe Johnson, Matt Florell <mattf@vicidial.com> LICENSE: AGPLv2
#
# Other scripts that this application depends on:
# - SCRIPT_multirecording.php: Gives agents ability to stop and start recordings over a forced-recording (ALLFORCE) call
#
# CHANGELOG
# 120224-2240 - First Build
# 130328-0009 - Converted ereg to preg functions
#
require("dbconnect.php");
@@ -44,15 +45,15 @@ $stmt="select campaign_rec_filename from vicidial_campaigns where campaign_id='$
$rslt=mysql_query($stmt, $link);
$row=mysql_fetch_array($rslt);
$filename=$row["campaign_rec_filename"];
$filename=eregi_replace("CAMPAIGN", $campaign, $filename);
$filename=eregi_replace("INGROUP", $campaign, $filename);
$filename=eregi_replace("CUSTPHONE", $phone_number, $filename);
$filename=eregi_replace("FULLDATE", date("Ymd-His"), $filename);
$filename=eregi_replace("TINYDATE", (date("Y")-2000).date("mdHis"), $filename);
$filename=eregi_replace("AGENT", $user, $filename);
$filename=eregi_replace("EPOCH", $StarTtime, $filename);
$filename=eregi_replace("VENDORLEADCODE", $vendor_lead_code, $filename);
$filename=eregi_replace("LEADID", $lead_id, $filename);
$filename=preg_replace("/CAMPAIGN/i", $campaign, $filename);
$filename=preg_replace("/INGROUP/i", $campaign, $filename);
$filename=preg_replace("/CUSTPHONE/i", $phone_number, $filename);
$filename=preg_replace("/FULLDATE/i", date("Ymd-His"), $filename);
$filename=preg_replace("/TINYDATE/i", (date("Y")-2000).date("mdHis"), $filename);
$filename=preg_replace("/AGENT/i", $user, $filename);
$filename=preg_replace("/EPOCH/i", $StarTtime, $filename);
$filename=preg_replace("/VENDORLEADCODE/i", $vendor_lead_code, $filename);
$filename=preg_replace("/LEADID/i", $lead_id, $filename);
$channel="Local/5".$session_id."@".$ext_context;
$ext_priority=1;
+13 -12
View File
@@ -5,11 +5,12 @@
#
# <iframe src="/agc/SCRIPT_virido_crm_call.php?lead_id=--A--lead_id--B--&list_id=--A--list_id--B--&user=--A--user--B--&campaign_id=--A--campaign_id--B--&phone_number=--A--phone_number--B--&vendor_id=--A--vendor_lead_code--B--&user_custom_five=--A--user_custom_five--B--" style="width:600;height:400;background-color:transparent;" scrolling="no" frameborder="0" allowtransparency="true" id="popupFrame" name="popupFrame" width="600" height="400" STYLE="z-index:17"> </iframe>
#
# Copyright (C) 2012 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
#
# CHANGES:
# 120223-1156 - First Build
# 130328-0014 - Converted ereg to preg functions
#
if (isset($_GET["button_id"])) {$button_id=$_GET["button_id"];}
@@ -34,19 +35,19 @@ if (isset($_GET["epoch"])) {$epoch=$_GET["epoch"];}
elseif (isset($_POST["epoch"])) {$epoch=$_POST["epoch"];}
### security strip all non-alphanumeric characters out of the variables ###
$button_id=ereg_replace("[^0-9]","",$button_id);
$lead_id=ereg_replace("[^0-9]","",$lead_id);
$list_id=ereg_replace("[^0-9]","",$list_id);
$phone_number=ereg_replace("[^0-9]","",$phone_number);
$vendor_id = ereg_replace("[^- \:\/\_0-9a-zA-Z]","",$vendor_id);
$user=ereg_replace("[^0-9a-zA-Z]","",$user);
$campaign = ereg_replace("[^-\_0-9a-zA-Z]","",$campaign);
$stage = ereg_replace("[^-\_0-9a-zA-Z]","",$stage);
$epoch = ereg_replace("[^0-9]","",$epoch);
$button_id=preg_replace("/[^0-9]/","",$button_id);
$lead_id=preg_replace("/[^0-9]/","",$lead_id);
$list_id=preg_replace("/[^0-9]/","",$list_id);
$phone_number=preg_replace("/[^0-9]/","",$phone_number);
$vendor_id = preg_replace("/[^- \:\/\_0-9a-zA-Z]/","",$vendor_id);
$user=preg_replace("/[^0-9a-zA-Z]/","",$user);
$campaign = preg_replace("/[^-\_0-9a-zA-Z]/","",$campaign);
$stage = preg_replace("/[^-\_0-9a-zA-Z]/","",$stage);
$epoch = preg_replace("/[^0-9]/","",$epoch);
require("dbconnect.php");
if (eregi("CLICK",$stage))
if (preg_match("/CLICK/i",$stage))
{
$epochNOW = date("U");
$click_seconds = ($epochNOW - $epoch);
@@ -68,7 +69,7 @@ else
$script_name = getenv("SCRIPT_NAME");
$server_name = getenv("SERVER_NAME");
$server_port = getenv("SERVER_PORT");
if (eregi("443",$server_port)) {$HTTPprotocol = 'https://';}
if (preg_match("/443/i",$server_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';}
if (($server_port == '80') or ($server_port == '443') ) {$server_port='';}
else {$server_port = "$CL$server_port";}
+65 -72
View File
@@ -1,7 +1,7 @@
<?php
# active_list_refresh.php version 2.2.0
# active_list_refresh.php version 2.6
#
# Copyright (C) 2009 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed purely to serve updates of the live data to the display scripts
# This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table
@@ -39,6 +39,7 @@
# 60421-1155 - check GET/POST vars lines with isset to not trigger PHP NOTICES
# 60619-1118 - Added variable filters to close security holes for login form
# 90508-0727 - Changed to PHP long tags
# 130328-0029 - Converted ereg to preg functions
#
require("dbconnect.php");
@@ -82,22 +83,22 @@ if (isset($_GET["field_name"])) {$field_name=$_GET["field_name"];}
elseif (isset($_POST["field_name"])) {$field_name=$_POST["field_name"];}
### security strip all non-alphanumeric characters out of the variables ###
$user=ereg_replace("[^0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
$ADD=ereg_replace("[^0-9]","",$ADD);
$order=ereg_replace("[^0-9a-zA-Z]","",$order);
$format=ereg_replace("[^0-9a-zA-Z]","",$format);
$bgcolor=ereg_replace("[^\#0-9a-zA-Z]","",$bgcolor);
$txtcolor=ereg_replace("[^\#0-9a-zA-Z]","",$txtcolor);
$txtsize=ereg_replace("[^0-9a-zA-Z]","",$txtsize);
$selectsize=ereg_replace("[^0-9a-zA-Z]","",$selectsize);
$selectfontsize=ereg_replace("[^0-9a-zA-Z]","",$selectfontsize);
$selectedext=ereg_replace("[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]","",$selectedext);
$selectedtrunk=ereg_replace("[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]","",$selectedtrunk);
$selectedlocal=ereg_replace("[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]","",$selectedlocal);
$textareaheight=ereg_replace("[^0-9a-zA-Z]","",$textareaheight);
$textareawidth=ereg_replace("[^0-9a-zA-Z]","",$textareawidth);
$field_name=ereg_replace("[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]","",$field_name);
$user=preg_replace("/[^0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^0-9a-zA-Z]/","",$pass);
$ADD=preg_replace("/[^0-9]/","",$ADD);
$order=preg_replace("/[^0-9a-zA-Z]/","",$order);
$format=preg_replace("/[^0-9a-zA-Z]/","",$format);
$bgcolor=preg_replace("/[^\#0-9a-zA-Z]/","",$bgcolor);
$txtcolor=preg_replace("/[^\#0-9a-zA-Z]/","",$txtcolor);
$txtsize=preg_replace("/[^0-9a-zA-Z]/","",$txtsize);
$selectsize=preg_replace("/[^0-9a-zA-Z]/","",$selectsize);
$selectfontsize=preg_replace("/[^0-9a-zA-Z]/","",$selectfontsize);
$selectedext=preg_replace("/[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]/","",$selectedext);
$selectedtrunk=preg_replace("/[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]/","",$selectedtrunk);
$selectedlocal=preg_replace("/[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]/","",$selectedlocal);
$textareaheight=preg_replace("/[^0-9a-zA-Z]/","",$textareaheight);
$textareawidth=preg_replace("/[^0-9a-zA-Z]/","",$textareawidth);
$field_name=preg_replace("/[^ \#\*\:\/\@\.\-\_0-9a-zA-Z]/","",$field_name);
# default optional vars if not set
if (!isset($ADD)) {$ADD="1";}
@@ -111,8 +112,8 @@ if (!isset($selectfontsize)) {$selectfontsize='10';}
if (!isset($textareaheight)) {$textareaheight='10';}
if (!isset($textareawidth)) {$textareawidth='20';}
$version = '0.0.8';
$build = '60619-1118';
$version = '0.0.10';
$build = '130328-0029';
$StarTtime = date("U");
$NOW_DATE = date("Y-m-d");
$NOW_TIME = date("Y-m-d H:i:s");
@@ -124,14 +125,13 @@ if (!isset($query_date)) {$query_date = $NOW_DATE;}
$row=mysql_fetch_row($rslt);
$auth=$row[0];
if( (strlen($user)<2) or (strlen($pass)<2) or ($auth==0))
if( (strlen($user)<2) or (strlen($pass)<2) or ($auth==0))
{
echo "Invalid Username/Password: |$user|$pass|\n";
exit;
}
else
else
{
if( (strlen($server_ip)<6) or (!isset($server_ip)) or ( (strlen($session_name)<12) or (!isset($session_name)) ) )
{
echo "Invalid server_ip: |$server_ip| or Invalid session_name: |$session_name|\n";
@@ -144,12 +144,12 @@ if (!isset($query_date)) {$query_date = $NOW_DATE;}
$rslt=mysql_query($stmt, $link);
$row=mysql_fetch_row($rslt);
$SNauth=$row[0];
if($SNauth==0)
if($SNauth==0)
{
echo "Invalid session_name: |$session_name|$server_ip|\n";
exit;
}
else
else
{
# do nothing for now
}
@@ -157,21 +157,21 @@ if (!isset($query_date)) {$query_date = $NOW_DATE;}
}
if ($format=='table')
{
echo "<html>\n";
echo "<head>\n";
echo "<!-- VERSION: $version BUILD: $build ADD: $ADD server_ip: $server_ip-->\n";
echo "<title>List Display: ";
if ($ADD==1) {echo "Live Extensions";}
if ($ADD==2) {echo "Busy Extensions";}
if ($ADD==3) {echo "Outside Lines";}
if ($ADD==4) {echo "Local Extensions";}
if ($ADD==5) {echo "Conferences";}
if ($ADD==99999) {echo "HELP";}
echo "</title>\n";
echo "</head>\n";
echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>\n";
}
{
echo "<html>\n";
echo "<head>\n";
echo "<!-- VERSION: $version BUILD: $build ADD: $ADD server_ip: $server_ip-->\n";
echo "<title>List Display: ";
if ($ADD==1) {echo "Live Extensions";}
if ($ADD==2) {echo "Busy Extensions";}
if ($ADD==3) {echo "Outside Lines";}
if ($ADD==4) {echo "Local Extensions";}
if ($ADD==5) {echo "Conferences";}
if ($ADD==99999) {echo "HELP";}
echo "</title>\n";
echo "</head>\n";
echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>\n";
}
@@ -181,7 +181,7 @@ echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>
# ADD=1 display all live extensions on a server
######################
if ($ADD==1)
{
{
$pt='pt';
if (!$field_name) {$field_name = 'extension';}
if ($format=='table') {echo "<TABLE WIDTH=120 BGCOLOR=$bgcolor cellpadding=0 cellspacing=0>\n";}
@@ -200,7 +200,8 @@ if ($ADD==1)
$rslt=mysql_query($stmt, $link);
if ($rslt) {$phones_to_print = mysql_num_rows($rslt);}
$o=0;
while ($phones_to_print > $o) {
while ($phones_to_print > $o)
{
$row=mysql_fetch_row($rslt);
if ($format=='table')
{
@@ -221,13 +222,13 @@ if ($ADD==1)
echo "</OPTION>\n";
}
$o++;
}
}
if ($format=='table') {echo "</TABLE>\n";}
if ($format=='menu') {echo "</SELECT>\n";}
if ($format=='selectlist') {echo "</SELECT>\n";}
if ($format=='textarea') {echo "</TEXTAREA>\n";}
}
}
@@ -239,7 +240,7 @@ if ($ADD==1)
# ADD=2 display all busy extensions on a server
######################
if ($ADD==2)
{
{
if (!$field_name) {$field_name = 'busyext';}
if ($format=='table') {echo "<TABLE WIDTH=120 BGCOLOR=$bgcolor cellpadding=0 cellspacing=0>\n";}
if ($format=='menu') {echo "<SELECT SIZE=1 name=\"$field_name\">\n";}
@@ -257,7 +258,8 @@ if ($ADD==2)
$rslt=mysql_query($stmt, $link);
if ($rslt) {$busys_to_print = mysql_num_rows($rslt);}
$o=0;
while ($busys_to_print > $o) {
while ($busys_to_print > $o)
{
$row=mysql_fetch_row($rslt);
if ($format=='table')
{
@@ -278,13 +280,13 @@ if ($ADD==2)
echo "</OPTION>\n";
}
$o++;
}
}
if ($format=='table') {echo "</TABLE>\n";}
if ($format=='menu') {echo "</SELECT>\n";}
if ($format=='selectlist') {echo "</SELECT>\n";}
if ($format=='textarea') {echo "</TEXTAREA>\n";}
}
}
@@ -295,7 +297,7 @@ if ($ADD==2)
# ADD=3 display all busy outside lines(trunks) on a server
######################
if ($ADD==3)
{
{
if (!$field_name) {$field_name = 'trunk';}
if ($format=='table') {echo "<TABLE WIDTH=120 BGCOLOR=$bgcolor cellpadding=0 cellspacing=0>\n";}
if ($format=='menu') {echo "<SELECT SIZE=1 name=\"$field_name\">\n";}
@@ -313,7 +315,8 @@ if ($ADD==3)
$rslt=mysql_query($stmt, $link);
if ($rslt) {$busys_to_print = mysql_num_rows($rslt);}
$o=0;
while ($busys_to_print > $o) {
while ($busys_to_print > $o)
{
$row=mysql_fetch_row($rslt);
if ($format=='table')
{
@@ -334,13 +337,13 @@ if ($ADD==3)
echo "</OPTION>\n";
}
$o++;
}
}
if ($format=='table') {echo "</TABLE>\n";}
if ($format=='menu') {echo "</SELECT>\n";}
if ($format=='selectlist') {echo "</SELECT>\n";}
if ($format=='textarea') {echo "</TEXTAREA>\n";}
}
}
@@ -351,7 +354,7 @@ if ($ADD==3)
# ADD=4 display all busy Local lines on a server
######################
if ($ADD==4)
{
{
if (!$field_name) {$field_name = 'local';}
if ($format=='table') {echo "<TABLE WIDTH=120 BGCOLOR=$bgcolor cellpadding=0 cellspacing=0>\n";}
if ($format=='menu') {echo "<SELECT SIZE=1 name=\"$field_name\">\n";}
@@ -369,7 +372,8 @@ if ($ADD==4)
$rslt=mysql_query($stmt, $link);
if ($rslt) {$busys_to_print = mysql_num_rows($rslt);}
$o=0;
while ($busys_to_print > $o) {
while ($busys_to_print > $o)
{
$row=mysql_fetch_row($rslt);
if ($format=='table')
{
@@ -390,13 +394,13 @@ if ($ADD==4)
echo "</OPTION>\n";
}
$o++;
}
}
if ($format=='table') {echo "</TABLE>\n";}
if ($format=='menu') {echo "</SELECT>\n";}
if ($format=='selectlist') {echo "</SELECT>\n";}
if ($format=='textarea') {echo "</TEXTAREA>\n";}
}
}
@@ -407,7 +411,7 @@ if ($ADD==4)
# ADD=5 display all agc-usable conferences on a server
######################
if ($ADD==5)
{
{
$pt='pt';
if (!$field_name) {$field_name = 'conferences';}
if ($format=='table') {echo "<TABLE WIDTH=120 BGCOLOR=$bgcolor cellpadding=0 cellspacing=0>\n";}
@@ -426,7 +430,8 @@ if ($ADD==5)
$rslt=mysql_query($stmt, $link);
if ($rslt) {$phones_to_print = mysql_num_rows($rslt);}
$o=0;
while ($phones_to_print > $o) {
while ($phones_to_print > $o)
{
$row=mysql_fetch_row($rslt);
if ($format=='table')
{
@@ -447,21 +452,13 @@ if ($ADD==5)
echo "</OPTION>\n";
}
$o++;
}
}
if ($format=='table') {echo "</TABLE>\n";}
if ($format=='menu') {echo "</SELECT>\n";}
if ($format=='selectlist') {echo "</SELECT>\n";}
if ($format=='textarea') {echo "</TEXTAREA>\n";}
}
}
@@ -477,7 +474,3 @@ exit;
?>
+99 -98
View File
@@ -1,7 +1,7 @@
<?php
# api.php
#
# Copyright (C) 2012 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed as an API(Application Programming Interface) to allow
# other programs to interact with the VICIDIAL Agent screen
@@ -64,10 +64,11 @@
# 120913-2039 - Added group_alias to transfer_conference function
# 121120-0855 - Added QM socket-send functionality
# 121124-2354 - Added Other Campaign DNC option
# 130328-0010 - Converted ereg to preg functions
#
$version = '2.6-30';
$build = '121124-2354';
$version = '2.6-31';
$build = '130328-0010';
$startMS = microtime();
@@ -212,74 +213,74 @@ if ($qm_conf_ct > 0)
##### END SETTINGS LOOKUP #####
###########################################
$ingroup_choices = ereg_replace("\+"," ",$ingroup_choices);
$query_string = ereg_replace("'|\"|\\\\|;","",$query_string);
$ingroup_choices = preg_replace("/\+/"," ",$ingroup_choices);
$query_string = preg_replace("/'|\"|\\\\|;/","",$query_string);
if ($non_latin < 1)
{
$user=ereg_replace("[^0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
$agent_user=ereg_replace("[^0-9a-zA-Z]","",$agent_user);
$function = ereg_replace("[^-\_0-9a-zA-Z]","",$function);
$value = ereg_replace("[^-\_0-9a-zA-Z]","",$value);
$vendor_id = ereg_replace("[^-\.\_0-9a-zA-Z]","",$vendor_id);
$focus = ereg_replace("[^-\_0-9a-zA-Z]","",$focus);
$preview = ereg_replace("[^-\_0-9a-zA-Z]","",$preview);
$notes = ereg_replace("\+"," ",$notes);
$notes = ereg_replace("[^- \.\_0-9a-zA-Z]","",$notes);
$phone_code = ereg_replace("[^0-9X]","",$phone_code);
$search = ereg_replace("[^-\_0-9a-zA-Z]","",$search);
$group_alias = ereg_replace("[^0-9a-zA-Z]","",$group_alias);
$dial_prefix = ereg_replace("[^0-9a-zA-Z]","",$dial_prefix);
$source = ereg_replace("[^0-9a-zA-Z]","",$source);
$format = ereg_replace("[^0-9a-zA-Z]","",$format);
$vtiger_callback = ereg_replace("[^A-Z]","",$vtiger_callback);
$alt_dial = ereg_replace("[^0-9A-Z]","",$alt_dial);
$blended = ereg_replace("[^A-Z]","",$blended);
$ingroup_choices = ereg_replace("[^- \_0-9a-zA-Z]","",$ingroup_choices);
$set_as_default = ereg_replace("[^A-Z]","",$set_as_default);
$phone_number = ereg_replace("[^0-9]","",$phone_number);
$address1 = ereg_replace("[^- \_0-9a-zA-Z]","",$address1);
$address2 = ereg_replace("[^- \_0-9a-zA-Z]","",$address2);
$address3 = ereg_replace("[^- \_0-9a-zA-Z]","",$address3);
$alt_phone = ereg_replace("[^- \_0-9a-zA-Z]","",$alt_phone);
$city = ereg_replace("[^- \_0-9a-zA-Z]","",$city);
$comments = ereg_replace("[^- \_0-9a-zA-Z]","",$comments);
$country_code = ereg_replace("[^A-Z]","",$country_code);
$date_of_birth = ereg_replace("[^- \_0-9]","",$date_of_birth);
$email = ereg_replace("[^-\.\:\/\@\_0-9a-zA-Z]","",$email);
$first_name = ereg_replace("[^- \_0-9a-zA-Z]","",$first_name);
$gender = ereg_replace("[^A-Z]","",$gender);
$gmt_offset_now = ereg_replace("[^- \.\_0-9]","",$gmt_offset_now);
$last_name = ereg_replace("[^- \_0-9a-zA-Z]","",$last_name);
$lead_id = ereg_replace("[^0-9]","",$lead_id);
$middle_initial = ereg_replace("[^- \_0-9a-zA-Z]","",$middle_initial);
$province = ereg_replace("[^- \.\_0-9a-zA-Z]","",$province);
$security_phrase = ereg_replace("[^- \.\_0-9a-zA-Z]","",$security_phrase);
$source_id = ereg_replace("[^- \.\_0-9a-zA-Z]","",$source_id);
$state = ereg_replace("[^- \_0-9a-zA-Z]","",$state);
$title = ereg_replace("[^- \_0-9a-zA-Z]","",$title);
$vendor_lead_code = ereg_replace("[^- \.\_0-9a-zA-Z]","",$vendor_lead_code);
$rank = ereg_replace("[^-0-9]","",$rank);
$owner = ereg_replace("[^-\.\:\/\@\_0-9a-zA-Z]","",$owner);
$dial_override = ereg_replace("[^A-Z]","",$dial_override);
$consultative = ereg_replace("[^A-Z]","",$consultative);
$callback_datetime = ereg_replace("\+"," ",$callback_datetime);
$callback_datetime = ereg_replace("[^- \:\.\_0-9a-zA-Z]","",$callback_datetime);
$callback_type = ereg_replace("[^A-Z]","",$callback_type);
$callback_comments = ereg_replace("\+"," ",$callback_comments);
$callback_comments = ereg_replace("[^- \.\_0-9a-zA-Z]","",$callback_comments);
$qm_dispo_code = ereg_replace("[^-\.\_0-9a-zA-Z]","",$qm_dispo_code);
$alt_user = ereg_replace("[^0-9a-zA-Z]","",$alt_user);
$postal_code = ereg_replace("[^- \.\_0-9a-zA-Z]","",$postal_code);
$user=preg_replace("/[^0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^0-9a-zA-Z]/","",$pass);
$agent_user=preg_replace("/[^0-9a-zA-Z]/","",$agent_user);
$function = preg_replace("/[^-\_0-9a-zA-Z]/","",$function);
$value = preg_replace("/[^-\_0-9a-zA-Z]/","",$value);
$vendor_id = preg_replace("/[^-\.\_0-9a-zA-Z]/","",$vendor_id);
$focus = preg_replace("/[^-\_0-9a-zA-Z]/","",$focus);
$preview = preg_replace("/[^-\_0-9a-zA-Z]/","",$preview);
$notes = preg_replace("/\+/"," ",$notes);
$notes = preg_replace("/[^- \.\_0-9a-zA-Z]/","",$notes);
$phone_code = preg_replace("/[^0-9X]/","",$phone_code);
$search = preg_replace("/[^-\_0-9a-zA-Z]/","",$search);
$group_alias = preg_replace("/[^0-9a-zA-Z]/","",$group_alias);
$dial_prefix = preg_replace("/[^0-9a-zA-Z]/","",$dial_prefix);
$source = preg_replace("/[^0-9a-zA-Z]/","",$source);
$format = preg_replace("/[^0-9a-zA-Z]/","",$format);
$vtiger_callback = preg_replace("/[^A-Z]/","",$vtiger_callback);
$alt_dial = preg_replace("/[^0-9A-Z]/","",$alt_dial);
$blended = preg_replace("/[^A-Z]/","",$blended);
$ingroup_choices = preg_replace("/[^- \_0-9a-zA-Z]/","",$ingroup_choices);
$set_as_default = preg_replace("/[^A-Z]/","",$set_as_default);
$phone_number = preg_replace("/[^0-9]/","",$phone_number);
$address1 = preg_replace("/[^- \_0-9a-zA-Z]/","",$address1);
$address2 = preg_replace("/[^- \_0-9a-zA-Z]/","",$address2);
$address3 = preg_replace("/[^- \_0-9a-zA-Z]/","",$address3);
$alt_phone = preg_replace("/[^- \_0-9a-zA-Z]/","",$alt_phone);
$city = preg_replace("/[^- \_0-9a-zA-Z]/","",$city);
$comments = preg_replace("/[^- \_0-9a-zA-Z]/","",$comments);
$country_code = preg_replace("/[^A-Z]/","",$country_code);
$date_of_birth = preg_replace("/[^- \_0-9]/","",$date_of_birth);
$email = preg_replace("/[^-\.\:\/\@\_0-9a-zA-Z]/","",$email);
$first_name = preg_replace("/[^- \_0-9a-zA-Z]/","",$first_name);
$gender = preg_replace("/[^A-Z]/","",$gender);
$gmt_offset_now = preg_replace("/[^- \.\_0-9]/","",$gmt_offset_now);
$last_name = preg_replace("/[^- \_0-9a-zA-Z]/","",$last_name);
$lead_id = preg_replace("/[^0-9]/","",$lead_id);
$middle_initial = preg_replace("/[^- \_0-9a-zA-Z]/","",$middle_initial);
$province = preg_replace("/[^- \.\_0-9a-zA-Z]/","",$province);
$security_phrase = preg_replace("/[^- \.\_0-9a-zA-Z]/","",$security_phrase);
$source_id = preg_replace("/[^- \.\_0-9a-zA-Z]/","",$source_id);
$state = preg_replace("/[^- \_0-9a-zA-Z]/","",$state);
$title = preg_replace("/[^- \_0-9a-zA-Z]/","",$title);
$vendor_lead_code = preg_replace("/[^- \.\_0-9a-zA-Z]/","",$vendor_lead_code);
$rank = preg_replace("/[^-0-9]/","",$rank);
$owner = preg_replace("/[^-\.\:\/\@\_0-9a-zA-Z]/","",$owner);
$dial_override = preg_replace("/[^A-Z]/","",$dial_override);
$consultative = preg_replace("/[^A-Z]/","",$consultative);
$callback_datetime = preg_replace("/\+/"," ",$callback_datetime);
$callback_datetime = preg_replace("/[^- \:\.\_0-9a-zA-Z]/","",$callback_datetime);
$callback_type = preg_replace("/[^A-Z]/","",$callback_type);
$callback_comments = preg_replace("/\+/"," ",$callback_comments);
$callback_comments = preg_replace("/[^- \.\_0-9a-zA-Z]/","",$callback_comments);
$qm_dispo_code = preg_replace("/[^-\.\_0-9a-zA-Z]/","",$qm_dispo_code);
$alt_user = preg_replace("/[^0-9a-zA-Z]/","",$alt_user);
$postal_code = preg_replace("/[^- \.\_0-9a-zA-Z]/","",$postal_code);
}
else
{
$user = ereg_replace("'|\"|\\\\|;","",$user);
$pass = ereg_replace("'|\"|\\\\|;","",$pass);
$source = ereg_replace("'|\"|\\\\|;","",$source);
$agent_user = ereg_replace("'|\"|\\\\|;","",$agent_user);
$alt_user = ereg_replace("'|\"|\\\\|;","",$alt_user);
$user = preg_replace("/'|\"|\\\\|;/","",$user);
$pass = preg_replace("/'|\"|\\\\|;/","",$pass);
$source = preg_replace("/'|\"|\\\\|;/","",$source);
$agent_user = preg_replace("/'|\"|\\\\|;/","",$agent_user);
$alt_user = preg_replace("/'|\"|\\\\|;/","",$alt_user);
}
### date and fixed variables
@@ -622,7 +623,7 @@ if ($function == 'external_status')
################################################################################
if ($function == 'external_pause')
{
if ( (strlen($value)<1) or ( (strlen($agent_user)<1) and (strlen($alt_user)<1) ) or (!ereg("PAUSE|RESUME",$value)) )
if ( (strlen($value)<1) or ( (strlen($agent_user)<1) and (strlen($alt_user)<1) ) or (!preg_match("/PAUSE|RESUME/",$value)) )
{
$result = 'ERROR';
$result_reason = "external_pause not valid";
@@ -659,7 +660,7 @@ if ($function == 'external_pause')
$row=mysql_fetch_row($rslt);
if ($row[0] > 0)
{
if (ereg("RESUME",$value))
if (preg_match("/RESUME/",$value))
{
$stmt = "select count(*) from vicidial_live_agents where user='$agent_user' and status IN('READY','QUEUE','INCALL','CLOSER');";
if ($DB) {echo "$stmt\n";}
@@ -705,7 +706,7 @@ if ($function == 'external_pause')
################################################################################
if ($function == 'logout')
{
if ( (strlen($value)<1) or ( (strlen($agent_user)<1) and (strlen($alt_user)<1) ) or (!ereg("LOGOUT",$value)) )
if ( (strlen($value)<1) or ( (strlen($agent_user)<1) and (strlen($alt_user)<1) ) or (!preg_match("/LOGOUT/",$value)) )
{
$result = 'ERROR';
$result_reason = "logout not valid";
@@ -1096,7 +1097,7 @@ if ($function == 'call_agent')
################################################################################
if ($function == 'external_dial')
{
$value = ereg_replace("[^0-9]","",$value);
$value = preg_replace("/[^0-9]/","",$value);
if ( ( (strlen($value)<2) and (strlen($lead_id)<1) ) or ( (strlen($agent_user)<2) and (strlen($alt_user)<2) ) or (strlen($search)<2) or (strlen($preview)<2) or (strlen($focus)<2) )
{
@@ -1206,7 +1207,7 @@ if ($function == 'external_dial')
####### Begin Vtiger CallBack Launching #######
$vtiger_callback_id='';
if ( (eregi("YES",$vtiger_callback)) and (preg_match("/^99/",$value)) )
if ( (preg_match("/YES/i",$vtiger_callback)) and (preg_match("/^99/",$value)) )
{
$value = preg_replace("/^99/",'',$value);
$value = ($value + 0);
@@ -1319,7 +1320,7 @@ if ($function == 'external_dial')
$row=mysql_fetch_row($rslt);
$value = $row[0];
$phone_code = $row[1];
$value = ereg_replace("[^0-9]","",$value);
$value = preg_replace("/[^0-9]/","",$value);
if (strlen($value)<2)
{
$result = 'ERROR';
@@ -1580,7 +1581,7 @@ if ($function == 'external_add_lead')
################################################################################
if ($function == 'change_ingroups')
{
$value = ereg_replace("[^A-Z]","",$value);
$value = preg_replace("/[^A-Z]/","",$value);
if ( (strlen($blended)<2) or (strlen($agent_user)<2) or (strlen($value)<3) )
{
@@ -1811,7 +1812,7 @@ if ($function == 'change_ingroups')
### LOG INSERTION Admin Log Table ###
$ip = getenv("REMOTE_ADDR");
$SQL_log = "$stmt|$stmtA|$stmtBlog";
$SQL_log = ereg_replace(';','',$SQL_log);
$SQL_log = preg_replace('/;/','',$SQL_log);
$SQL_log = addslashes($SQL_log);
$stmt="INSERT INTO vicidial_admin_log set event_date=NOW(), user='$user', ip_address='$ip', event_section='USERS', event_type='MODIFY', record_id='$agent_user', event_code='API MODIFY USER', event_sql=\"$SQL_log\", event_notes='';";
if ($DB) {echo "|$stmt|\n";}
@@ -1894,175 +1895,175 @@ if ($function == 'update_fields')
$fieldsSQL='';
$fieldsLISTS='';
$field_set=0;
if (ereg('phone_code',$query_string))
if (preg_match('/phone_code/',$query_string))
{
if ($DB) {echo "phone_code set to $phone_code\n";}
$fieldsSQL .= "phone_code='$phone_code',";
$fieldsLIST .= "phone_code,";
$field_set++;
}
if (ereg('address1',$query_string))
if (preg_match('/address1/',$query_string))
{
if ($DB) {echo "address1 set to $address1\n";}
$fieldsSQL .= "address1='$address1',";
$fieldsLIST .= "address1,";
$field_set++;
}
if (ereg('address2',$query_string))
if (preg_match('/address2/',$query_string))
{
if ($DB) {echo "address2 set to $address2\n";}
$fieldsSQL .= "address2='$address2',";
$fieldsLIST .= "address2,";
$field_set++;
}
if (ereg('address3',$query_string))
if (preg_match('/address3/',$query_string))
{
if ($DB) {echo "address3 set to $address3\n";}
$fieldsSQL .= "address3='$address3',";
$fieldsLIST .= "address3,";
$field_set++;
}
if (ereg('alt_phone',$query_string))
if (preg_match('/alt_phone/',$query_string))
{
if ($DB) {echo "alt_phone set to $alt_phone\n";}
$fieldsSQL .= "alt_phone='$alt_phone',";
$fieldsLIST .= "alt_phone,";
$field_set++;
}
if (ereg('city',$query_string))
if (preg_match('/city/',$query_string))
{
if ($DB) {echo "city set to $city\n";}
$fieldsSQL .= "city='$city',";
$fieldsLIST .= "city,";
$field_set++;
}
if (ereg('comments',$query_string))
if (preg_match('/comments/',$query_string))
{
if ($DB) {echo "comments set to $comments\n";}
$fieldsSQL .= "comments='$comments',";
$fieldsLIST .= "comments,";
$field_set++;
}
if (ereg('country_code',$query_string))
if (preg_match('/country_code/',$query_string))
{
if ($DB) {echo "country_code set to $country_code\n";}
$fieldsSQL .= "country_code='$country_code',";
$fieldsLIST .= "country_code,";
$field_set++;
}
if (ereg('date_of_birth',$query_string))
if (preg_match('/date_of_birth/',$query_string))
{
if ($DB) {echo "date_of_birth set to $date_of_birth\n";}
$fieldsSQL .= "date_of_birth='$date_of_birth',";
$fieldsLIST .= "date_of_birth,";
$field_set++;
}
if (ereg('email',$query_string))
if (preg_match('/email/',$query_string))
{
if ($DB) {echo "email set to $email\n";}
$fieldsSQL .= "email='$email',";
$fieldsLIST .= "email,";
$field_set++;
}
if (ereg('first_name',$query_string))
if (preg_match('/first_name/',$query_string))
{
if ($DB) {echo "first_name set to $first_name\n";}
$fieldsSQL .= "first_name='$first_name',";
$fieldsLIST .= "first_name,";
$field_set++;
}
if (ereg('gender',$query_string))
if (preg_match('/gender/',$query_string))
{
if ($DB) {echo "gender set to $gender\n";}
$fieldsSQL .= "gender='$gender',";
$fieldsLIST .= "gender,";
$field_set++;
}
if (ereg('gmt_offset_now',$query_string))
if (preg_match('/gmt_offset_now/',$query_string))
{
if ($DB) {echo "gmt_offset_now set to $gmt_offset_now\n";}
$fieldsSQL .= "gmt_offset_now='$gmt_offset_now',";
$fieldsLIST .= "gmt_offset_now,";
$field_set++;
}
if (ereg('last_name',$query_string))
if (preg_match('/last_name/',$query_string))
{
if ($DB) {echo "last_name set to $last_name\n";}
$fieldsSQL .= "last_name='$last_name',";
$fieldsLIST .= "last_name,";
$field_set++;
}
if (ereg('middle_initial',$query_string))
if (preg_match('/middle_initial/',$query_string))
{
if ($DB) {echo "middle_initial set to $middle_initial\n";}
$fieldsSQL .= "middle_initial='$middle_initial',";
$fieldsLIST .= "middle_initial,";
$field_set++;
}
if (ereg('phone_number',$query_string))
if (preg_match('/phone_number/',$query_string))
{
if ($DB) {echo "phone_number set to $phone_number\n";}
$fieldsSQL .= "phone_number='$phone_number',";
$fieldsLIST .= "phone_number,";
$field_set++;
}
if (ereg('postal_code',$query_string))
if (preg_match('/postal_code/i',$query_string))
{
if ($DB) {echo "postal_code set to $postal_code\n";}
$fieldsSQL .= "postal_code='$postal_code',";
$fieldsLIST .= "postal_code,";
$field_set++;
}
if (ereg('province',$query_string))
if (preg_match('/province/i',$query_string))
{
if ($DB) {echo "province set to $province\n";}
$fieldsSQL .= "province='$province',";
$fieldsLIST .= "province,";
$field_set++;
}
if (ereg('security_phrase',$query_string))
if (preg_match('/security_phrase/i',$query_string))
{
if ($DB) {echo "security_phrase set to $security_phrase\n";}
$fieldsSQL .= "security_phrase='$security_phrase',";
$fieldsLIST .= "security_phrase,";
$field_set++;
}
if (ereg('source_id',$query_string))
if (preg_match('/source_id/i',$query_string))
{
if ($DB) {echo "source_id set to $source_id\n";}
$fieldsSQL .= "source_id='$source_id',";
$fieldsLIST .= "source_id,";
$field_set++;
}
if (ereg('state',$query_string))
if (preg_match('/state/i',$query_string))
{
if ($DB) {echo "state set to $state\n";}
$fieldsSQL .= "state='$state',";
$fieldsLIST .= "state,";
$field_set++;
}
if (ereg('title',$query_string))
if (preg_match('/title/i',$query_string))
{
if ($DB) {echo "title set to $title\n";}
$fieldsSQL .= "title='$title',";
$fieldsLIST .= "title,";
$field_set++;
}
if (ereg('vendor_lead_code',$query_string))
if (preg_match('/vendor_lead_code/i',$query_string))
{
if ($DB) {echo "vendor_lead_code set to $vendor_lead_code\n";}
$fieldsSQL .= "vendor_lead_code='$vendor_lead_code',";
$fieldsLIST .= "vendor_lead_code,";
$field_set++;
}
if (ereg('rank',$query_string))
if (preg_match('/rank/i',$query_string))
{
if ($DB) {echo "rank set to $rank\n";}
$fieldsSQL .= "rank='$rank',";
$fieldsLIST .= "rank,";
$field_set++;
}
if (ereg('owner',$query_string))
if (preg_match('/owner/i',$query_string))
{
if ($DB) {echo "owner set to $owner\n";}
$fieldsSQL .= "owner='$owner',";
+14 -13
View File
@@ -1,7 +1,7 @@
<?php
# astguiclient.php - the web-based version of the astGUIclient client application
#
# Copyright (C) 2012 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# make sure you have added a user to the vicidial_users MySQL table with at least
# user_level 1 or greater to access this page. Also you need to have the login
@@ -59,6 +59,7 @@
# 90508-0727 - Changed to PHP long tags
# 91129-2211 - Replaced SELECT STAR in SQL query
# 120223-2124 - Removed logging of good login passwords if webroot writable is enabled
# 130328-0017 - Converted ereg to preg functions
#
require("dbconnect.php");
@@ -88,17 +89,17 @@ if (isset($_GET["relogin"])) {$relogin=$_GET["relogin"];}
$forever_stop=0;
$user_abb = "$user$user$user$user";
while ( (strlen($user_abb) > 4) and ($forever_stop < 200) )
{$user_abb = eregi_replace("^.","",$user_abb); $forever_stop++;}
{$user_abb = preg_replace("/^./","",$user_abb); $forever_stop++;}
$version = '2.2.4-1';
$build = '120223-2124';
$version = '2.2.6-1';
$build = '130328-0017';
### security strip all non-alphanumeric characters out of the variables ###
$DB=ereg_replace("[^0-9a-z]","",$DB);
$phone_login=ereg_replace("[^0-9a-zA-Z]","",$phone_login);
$phone_pass=ereg_replace("[^0-9a-zA-Z]","",$phone_pass);
$user=ereg_replace("[^0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
$DB=preg_replace("/[^0-9a-z]/","",$DB);
$phone_login=preg_replace("/[^0-9a-zA-Z]/","",$phone_login);
$phone_pass=preg_replace("/[^0-9a-zA-Z]/","",$phone_pass);
$user=preg_replace("/[^0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^0-9a-zA-Z]/","",$pass);
if ($force_logout)
@@ -134,13 +135,13 @@ $browser = getenv("HTTP_USER_AGENT");
$script_name = getenv("SCRIPT_NAME");
$server_name = getenv("SERVER_NAME");
$server_port = getenv("SERVER_PORT");
if (eregi("443",$server_port)) {$HTTPprotocol = 'https://';}
if (preg_match("/443/i",$server_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';}
if (($server_port == '80') or ($server_port == '443') ) {$server_port='';}
else {$server_port = "$CL$server_port";}
$agcPAGE = "$HTTPprotocol$server_name$server_port$script_name";
$agcDIR = $agcPAGE;
$agcDIR = eregi_replace('astguiclient.php','',$agcDIR);
$agcDIR = preg_replace('/astguiclient\.php/i','',$agcDIR);
if( (strlen($user)<2) or (strlen($pass)<2) or (!$auth) or ($relogin == 'YES') )
{
@@ -346,7 +347,7 @@ else
$local_web_callerID_URL_enc = rawurlencode($local_web_callerID_URL);
$session_ext = eregi_replace("[^a-z0-9]", "", $extension);
$session_ext = preg_replace("/[^a-z0-9]/i", "", $extension);
if (strlen($session_ext) > 10) {$session_ext = substr($session_ext, 0, 10);}
$session_rand = (rand(1,9999999) + 10000000);
$session_name = "$StarTtime$US$session_ext$session_rand";
@@ -372,7 +373,7 @@ else
$row=mysql_fetch_row($rslt);
$favorites_list=$row[0];
$h=0;
$favorites_listX = eregi_replace("'",'',$favorites_list);
$favorites_listX = preg_replace("/\'/i",'',$favorites_list);
$favorites = explode(',',$favorites_listX);
$favorites_count = count($favorites);
$favorites_listX='';
+24 -25
View File
@@ -1,7 +1,7 @@
<?php
# call_log_display.php version 2.2.0
# call_log_display.php version 2.6
#
# Copyright (C) 2009 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed purely to send the inbound and outbound calls for a specific phone
# This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table
@@ -29,6 +29,7 @@
# 60421-1401 - check GET/POST vars lines with isset to not trigger PHP NOTICES
# 60619-1202 - Added variable filters to close security holes for login form
# 90508-0727 - Changed to PHP long tags
# 130328-0028 - Converted ereg to preg functions
#
require("dbconnect.php");
@@ -49,8 +50,8 @@ if (isset($_GET["exten"])) {$exten=$_GET["exten"];}
if (isset($_GET["protocol"])) {$protocol=$_GET["protocol"];}
elseif (isset($_POST["protocol"])) {$protocol=$_POST["protocol"];}
$user=ereg_replace("[^0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
$user=preg_replace("/[^0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^0-9a-zA-Z]/","",$pass);
# default optional vars if not set
if (!isset($format)) {$format="text";}
@@ -59,8 +60,8 @@ if (!isset($out_limit)) {$out_limit="100";}
$number_dialed = 'number_dialed';
#$number_dialed = 'extension';
$version = '0.0.8';
$build = '60619-1202';
$version = '0.0.10';
$build = '130328-0028';
$StarTtime = date("U");
$NOW_DATE = date("Y-m-d");
$NOW_TIME = date("Y-m-d H:i:s");
@@ -72,14 +73,13 @@ if (!isset($query_date)) {$query_date = $NOW_DATE;}
$row=mysql_fetch_row($rslt);
$auth=$row[0];
if( (strlen($user)<2) or (strlen($pass)<2) or ($auth==0))
if( (strlen($user)<2) or (strlen($pass)<2) or ($auth==0))
{
echo "Invalid Username/Password: |$user|$pass|\n";
exit;
}
else
else
{
if( (strlen($server_ip)<6) or (!isset($server_ip)) or ( (strlen($session_name)<12) or (!isset($session_name)) ) )
{
echo "Invalid server_ip: |$server_ip| or Invalid session_name: |$session_name|\n";
@@ -92,12 +92,12 @@ if (!isset($query_date)) {$query_date = $NOW_DATE;}
$rslt=mysql_query($stmt, $link);
$row=mysql_fetch_row($rslt);
$SNauth=$row[0];
if($SNauth==0)
if($SNauth==0)
{
echo "Invalid session_name: |$session_name|$server_ip|\n";
exit;
}
else
else
{
# do nothing for now
}
@@ -105,26 +105,26 @@ if (!isset($query_date)) {$query_date = $NOW_DATE;}
}
if ($format=='debug')
{
echo "<html>\n";
echo "<head>\n";
echo "<!-- VERSION: $version BUILD: $build EXTEN: $exten server_ip: $server_ip-->\n";
echo "<title>Call Log Display";
echo "</title>\n";
echo "</head>\n";
echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>\n";
}
{
echo "<html>\n";
echo "<head>\n";
echo "<!-- VERSION: $version BUILD: $build EXTEN: $exten server_ip: $server_ip-->\n";
echo "<title>Call Log Display";
echo "</title>\n";
echo "</head>\n";
echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>\n";
}
$row=''; $rowx='';
$channel_live=1;
if ( (strlen($exten)<1) or (strlen($protocol)<3) )
if ( (strlen($exten)<1) or (strlen($protocol)<3) )
{
$channel_live=0;
echo "Exten $exten is not valid or protocol $protocol is not valid\n";
exit;
}
else
else
{
##### print outbound calls from the call_log table
$stmt="SELECT uniqueid,start_time,$number_dialed,length_in_sec FROM call_log where server_ip = '$server_ip' and channel LIKE \"$protocol/$exten%\" order by start_time desc limit $out_limit;";
@@ -133,7 +133,7 @@ echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>
if ($rslt) {$out_calls_count = mysql_num_rows($rslt);}
echo "$out_calls_count|";
$loop_count=0;
while ($out_calls_count>$loop_count)
while ($out_calls_count>$loop_count)
{
$loop_count++;
$row=mysql_fetch_row($rslt);
@@ -159,7 +159,7 @@ echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>
if ($rslt) {$in_calls_count = mysql_num_rows($rslt);}
echo "$in_calls_count|";
$loop_count=0;
while ($in_calls_count>$loop_count)
while ($in_calls_count>$loop_count)
{
$loop_count++;
$row=mysql_fetch_row($rslt);
@@ -179,7 +179,6 @@ echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>
echo "$row[0] ~$row[1] ~$row[2] ~$callerIDnum ~$callerIDname ~$call_time_MS|";
}
echo "\n";
}
+21 -20
View File
@@ -1,7 +1,7 @@
<?php
# conf_exten_check.php version 2.6
#
# Copyright (C) 2012 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed purely to send whether the meetme conference has live channels connected and which they are
# This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table
@@ -57,10 +57,11 @@
# 110610-0059 - Small fix for manual dial calls lasting more than 100 minutes in real-time report
# 120809-2353 - Added external_recording function
# 121028-2305 - Added extra check on session_name to validate agent screen requests
# 130328-0011 - Converted ereg to preg functions
#
$version = '2.6-32';
$build = '121028-2305';
$version = '2.6-33';
$build = '130328-0011';
$mel=1; # Mysql Error Log enabled = 1
$mysql_log_count=39;
$one_mysql_log=0;
@@ -116,13 +117,13 @@ if ($qm_conf_ct > 0)
if ($non_latin < 1)
{
$user=ereg_replace("[^-_0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^-_0-9a-zA-Z]","",$pass);
$user=preg_replace("/[^\-_0-9a-zA-Z]/i","",$user);
$pass=preg_replace("/[^\-_0-9a-zA-Z]/i","",$pass);
}
else
{
$user = ereg_replace("'|\"|\\\\|;","",$user);
$pass = ereg_replace("'|\"|\\\\|;","",$pass);
$user = preg_replace("/\'|\"|\\\\|;/","",$user);
$pass = preg_replace("/\'|\"|\\\\|;/","",$pass);
}
# default optional vars if not set
@@ -276,11 +277,11 @@ if ($ACTION == 'refresh')
$Alogin=$row[0];
$Acampaign=$row[1];
$AccampSQL=$row[2];
$AccampSQL = ereg_replace(' -','', $AccampSQL);
$AccampSQL = ereg_replace(' ',"','", $AccampSQL);
if (eregi('AGENTDIRECT', $AccampSQL))
$AccampSQL = preg_replace('/\s\-/','', $AccampSQL);
$AccampSQL = preg_replace('/\s/',"','", $AccampSQL);
if (preg_match('/AGENTDIRECT/i', $AccampSQL))
{
$AccampSQL = ereg_replace('AGENTDIRECT','', $AccampSQL);
$AccampSQL = preg_replace('/AGENTDIRECT/i','', $AccampSQL);
$ADsql = "or ( (campaign_id LIKE \"%AGENTDIRECT%\") and (agent_only='$user') )";
}
@@ -336,7 +337,7 @@ if ($ACTION == 'refresh')
$row=mysql_fetch_row($rslt);
$AcalleridCOUNT=$row[0];
if ( ($AcalleridCOUNT > 0) and (eregi("INCALL",$Astatus)) and (preg_match("/^M/",$Acallerid)) )
if ( ($AcalleridCOUNT > 0) and (preg_match("/INCALL/i",$Astatus)) and (preg_match("/^M/",$Acallerid)) )
{
$updateNOW_TIME = date("Y-m-d H:i:s");
$stmt="UPDATE vicidial_auto_calls set last_update_time='$updateNOW_TIME' where callerid='$Acallerid';";
@@ -345,7 +346,7 @@ if ($ACTION == 'refresh')
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'03038',$user,$server_ip,$session_name,$one_mysql_log);}
}
if ( ($AcalleridCOUNT < 1) and (eregi("INCALL",$Astatus)) and (strlen($Aagent_log_id) > 0) )
if ( ($AcalleridCOUNT < 1) and (preg_match("/INCALL/i",$Astatus)) and (strlen($Aagent_log_id) > 0) )
{
$DEADcustomer++;
### find whether the agent log record has already logged DEAD
@@ -398,7 +399,7 @@ if ($ACTION == 'refresh')
$row=mysql_fetch_row($rslt);
$AcalleridCOUNT=$row[0];
if ( ($AcalleridCOUNT > 0) and (eregi("INCALL",$Astatus)) )
if ( ($AcalleridCOUNT > 0) and (preg_match("/INCALL/i",$Astatus)) )
{
$updateNOW_TIME = date("Y-m-d H:i:s");
$stmt="UPDATE vicidial_auto_calls set last_update_time='$updateNOW_TIME' where callerid='$Acallerid';";
@@ -407,7 +408,7 @@ if ($ACTION == 'refresh')
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'03037',$user,$server_ip,$session_name,$one_mysql_log);}
}
if ( ($AcalleridCOUNT < 1) and (eregi("INCALL",$Astatus)) and (strlen($Aagent_log_id) > 0) )
if ( ($AcalleridCOUNT < 1) and (preg_match("/INCALL/i",$Astatus)) and (strlen($Aagent_log_id) > 0) )
{
$DEADcustomer++;
### find whether the agent log record has already logged DEAD
@@ -597,13 +598,13 @@ if ($ACTION == 'refresh')
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'03016',$VD_login,$server_ip,$session_name,$one_mysql_log);}
$row=mysql_fetch_row($rslt);
$shift_enforcement = $row[0];
$LOGgroup_shiftsSQL = eregi_replace(' ','',$row[1]);
$LOGgroup_shiftsSQL = eregi_replace(' ',"','",$LOGgroup_shiftsSQL);
$LOGgroup_shiftsSQL = preg_replace('/\s\s/','',$row[1]);
$LOGgroup_shiftsSQL = preg_replace('/\s/',"','",$LOGgroup_shiftsSQL);
$LOGgroup_shiftsSQL = "shift_id IN('$LOGgroup_shiftsSQL')";
### CHECK TO SEE IF AGENT IS WITHIN THEIR SHIFT IF RESTRICTED, IF NOT, OUTPUT ERROR
$Ashift_logout=0;
if ( ( (ereg("ALL",$shift_enforcement)) and (!ereg("OFF|START",$VU_agent_shift_enforcement_override)) ) or (ereg("ALL",$VU_agent_shift_enforcement_override)) )
if ( ( (preg_match("/ALL/",$shift_enforcement)) and (!preg_match("/OFF|START/",$VU_agent_shift_enforcement_override)) ) or (preg_match("/ALL/",$VU_agent_shift_enforcement_override)) )
{
$shift_ok=0;
if (strlen($LOGgroup_shiftsSQL) < 3)
@@ -627,7 +628,7 @@ if ($ACTION == 'refresh')
$shift_length = $rowx[2];
$shift_weekdays = $rowx[3];
if (eregi("$wday",$shift_weekdays))
if (preg_match("/$wday/i",$shift_weekdays))
{
$HHshift_length = substr($shift_length,0,2);
$MMshift_length = substr($shift_length,3,2);
@@ -662,7 +663,7 @@ if ($ACTION == 'refresh')
}
if ( ( ($time_diff > 8) or ($time_diff < -8) or ($web_diff > 8) or ($web_diff < -8) ) and (eregi("0$",$StarTtime)) )
if ( ( ($time_diff > 8) or ($time_diff < -8) or ($web_diff > 8) or ($web_diff < -8) ) and (preg_match("/0\$/i",$StarTtime)) )
{$Alogin='TIME_SYNC';}
if ( ($Acount < 1) or ($Scount < 1) )
{$Alogin='DEAD_VLA';}
+14 -10
View File
@@ -1,32 +1,36 @@
<?php
#
# dbconnect.php version 2.2.0
# dbconnect.php version 2.6
#
# database connection settings and some global web settings
#
# Copyright (C) 2010 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# CHANGES:
# 130328-0022 - Converted ereg to preg functions
#
if ( file_exists("/etc/astguiclient.conf") )
{
$DBCagc = file("/etc/astguiclient.conf");
foreach ($DBCagc as $DBCline)
{
$DBCline = preg_replace("/ |>|\n|\r|\t|\#.*|;.*/","",$DBCline);
if (ereg("^PATHlogs", $DBCline))
if (preg_match("/^PATHlogs/", $DBCline))
{$PATHlogs = $DBCline; $PATHlogs = preg_replace("/.*=/","",$PATHlogs);}
if (ereg("^PATHweb", $DBCline))
if (preg_match("/^PATHweb/", $DBCline))
{$WeBServeRRooT = $DBCline; $WeBServeRRooT = preg_replace("/.*=/","",$WeBServeRRooT);}
if (ereg("^VARserver_ip", $DBCline))
if (preg_match("/^VARserver_ip/", $DBCline))
{$WEBserver_ip = $DBCline; $WEBserver_ip = preg_replace("/.*=/","",$WEBserver_ip);}
if (ereg("^VARDB_server", $DBCline))
if (preg_match("/^VARDB_server/", $DBCline))
{$VARDB_server = $DBCline; $VARDB_server = preg_replace("/.*=/","",$VARDB_server);}
if (ereg("^VARDB_database", $DBCline))
if (preg_match("/^VARDB_database/", $DBCline))
{$VARDB_database = $DBCline; $VARDB_database = preg_replace("/.*=/","",$VARDB_database);}
if (ereg("^VARDB_user", $DBCline))
if (preg_match("/^VARDB_user/", $DBCline))
{$VARDB_user = $DBCline; $VARDB_user = preg_replace("/.*=/","",$VARDB_user);}
if (ereg("^VARDB_pass", $DBCline))
if (preg_match("/^VARDB_pass/", $DBCline))
{$VARDB_pass = $DBCline; $VARDB_pass = preg_replace("/.*=/","",$VARDB_pass);}
if (ereg("^VARDB_port", $DBCline))
if (preg_match("/^VARDB_port/", $DBCline))
{$VARDB_port = $DBCline; $VARDB_port = preg_replace("/.*=/","",$VARDB_port);}
}
}
+8 -7
View File
@@ -1,7 +1,7 @@
<?php
# deactivate_lead.php
#
# Copyright (C) 2012 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed to be used in the "Dispo URL" field of a campaign
# or in-group. It should take in the campaign_id to check for the same source_id
@@ -24,6 +24,7 @@
# CHANGES
# 100304-0354 - First Build
# 120223-2124 - Removed logging of good login passwords if webroot writable is enabled
# 130328-0016 - Converted ereg to preg functions
#
$api_script = 'deactivate';
@@ -90,13 +91,13 @@ if (preg_match("/$TD$dispo$TD/",$sale_status))
if ($non_latin < 1)
{
$user=ereg_replace("[^-_0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^-_0-9a-zA-Z]","",$pass);
$user=preg_replace("/[^-_0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^-_0-9a-zA-Z]/","",$pass);
}
else
{
$user = ereg_replace("'|\"|\\\\|;","",$user);
$pass = ereg_replace("'|\"|\\\\|;","",$pass);
$user = preg_replace("/\'|\"|\\\\|;/","",$user);
$pass = preg_replace("/\'|\"|\\\\|;/","",$pass);
}
$stmt="SELECT count(*) from vicidial_users where user='$user' and pass='$pass' and user_level > 0;";
@@ -137,7 +138,7 @@ if (preg_match("/$TD$dispo$TD/",$sale_status))
$duplicate_lists .= "'$row[0]',";
$L++;
}
$duplicate_lists = eregi_replace(",$",'',$duplicate_lists);
$duplicate_lists = preg_replace('/,$/','',$duplicate_lists);
if (strlen($duplicate_lists) < 2) {$duplicate_lists = "''";}
}
@@ -162,7 +163,7 @@ if (preg_match("/$TD$dispo$TD/",$sale_status))
$affected_rows = mysql_affected_rows($link);
$SQL_log = "$stmt|";
$SQL_log = ereg_replace(';','',$SQL_log);
$SQL_log = preg_replace('/;/','',$SQL_log);
$SQL_log = addslashes($SQL_log);
$stmt="INSERT INTO vicidial_api_log set user='$user',agent_user='$user',function='deactivate_lead',value='$lead_id',result='$affected_rows',result_reason='$search_field',source='vdc',data='$SQL_log',api_date='$NOW_TIME',api_script='$api_script';";
$rslt=mysql_query($stmt, $link);
+7 -6
View File
@@ -1,7 +1,7 @@
<?php
# dispo_move_list.php
#
# Copyright (C) 2012 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed to be used in the "Dispo URL" field of a campaign
# or in-group. It should take in the lead_id to check for the same lead_id
@@ -31,6 +31,7 @@
# 110702-2020 - Added multiple sets of options
# 111005-1102 - Added check and update for scheduled callback entry
# 120223-2124 - Removed logging of good login passwords if webroot writable is enabled
# 130328-0015 - Converted ereg to preg functions
#
$api_script = 'deactivate';
@@ -131,13 +132,13 @@ if ($match_found > 0)
if ($non_latin < 1)
{
$user=ereg_replace("[^-_0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^-_0-9a-zA-Z]","",$pass);
$user=preg_replace("/[^-_0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^-_0-9a-zA-Z]/","",$pass);
}
else
{
$user = ereg_replace("'|\"|\\\\|;","",$user);
$pass = ereg_replace("'|\"|\\\\|;","",$pass);
$user = preg_replace("/\'|\"|\\\\|;/","",$user);
$pass = preg_replace("/\'|\"|\\\\|;/","",$pass);
}
$stmt="SELECT count(*) from vicidial_users where user='$user' and pass='$pass' and user_level > 0;";
@@ -198,7 +199,7 @@ if ($match_found > 0)
$CBaffected_rows = mysql_affected_rows($link);
$SQL_log = "$stmt|$stmtB|$CBaffected_rows|";
$SQL_log = ereg_replace(';','',$SQL_log);
$SQL_log = preg_replace('/;/','',$SQL_log);
$SQL_log = addslashes($SQL_log);
$stmt="INSERT INTO vicidial_api_log set user='$user',agent_user='$user',function='deactivate_lead',value='$lead_id',result='$affected_rows',result_reason='$lead_id',source='vdc',data='$SQL_log',api_date='$NOW_TIME',api_script='$api_script';";
$rslt=mysql_query($stmt, $link);
+69 -68
View File
@@ -1,10 +1,10 @@
<?php
#
# functions.php version 2.4
# functions.php version 2.6
#
# functions for agent scripts
#
# Copyright (C) 2012 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
#
# CHANGES:
@@ -14,6 +14,7 @@
# 110719-0858 - Added HIDEBLOB field type
# 110730-2336 - Added call_id variable
# 120213-1709 - Commented out default of READONLY fields since they cannot change
# 130328-0018 - Converted ereg to preg functions
#
@@ -356,7 +357,7 @@ function custom_list_fields_values($lead_id,$list_id,$uniqueid,$user)
##### BEGIN parsing for vicidial variables #####
if (preg_match("/--A--/",$CFoutput))
{
if ( (eregi('--A--user_custom_',$CFoutput)) or (eregi('--A--fullname',$CFoutput)) )
if ( (preg_match('/--A--user_custom_/i',$CFoutput)) or (preg_match('/--A--fullname/i',$CFoutput)) )
{
$stmt = "select custom_one,custom_two,custom_three,custom_four,custom_five,full_name from vicidial_users where user='$user';";
if ($DB) {echo "$stmt\n";}
@@ -375,7 +376,7 @@ function custom_list_fields_values($lead_id,$list_id,$uniqueid,$user)
}
}
if (eregi('--A--dialed_',$CFoutput))
if (preg_match('/--A--dialed_/i',$CFoutput))
{
$dialed_number = $phone_number;
$dialed_label = 'NONE';
@@ -435,69 +436,69 @@ function custom_list_fields_values($lead_id,$list_id,$uniqueid,$user)
$owner = trim($row[33]);
}
$CFoutput = eregi_replace('--A--lead_id--B--',"$lead_id",$CFoutput);
$CFoutput = eregi_replace('--A--vendor_id--B--',"$vendor_id",$CFoutput);
$CFoutput = eregi_replace('--A--vendor_lead_code--B--',"$vendor_lead_code",$CFoutput);
$CFoutput = eregi_replace('--A--list_id--B--',"$list_id",$CFoutput);
$CFoutput = eregi_replace('--A--gmt_offset_now--B--',"$gmt_offset_now",$CFoutput);
$CFoutput = eregi_replace('--A--phone_code--B--',"$phone_code",$CFoutput);
$CFoutput = eregi_replace('--A--phone_number--B--',"$phone_number",$CFoutput);
$CFoutput = eregi_replace('--A--title--B--',"$title",$CFoutput);
$CFoutput = eregi_replace('--A--first_name--B--',"$first_name",$CFoutput);
$CFoutput = eregi_replace('--A--middle_initial--B--',"$middle_initial",$CFoutput);
$CFoutput = eregi_replace('--A--last_name--B--',"$last_name",$CFoutput);
$CFoutput = eregi_replace('--A--address1--B--',"$address1",$CFoutput);
$CFoutput = eregi_replace('--A--address2--B--',"$address2",$CFoutput);
$CFoutput = eregi_replace('--A--address3--B--',"$address3",$CFoutput);
$CFoutput = eregi_replace('--A--city--B--',"$city",$CFoutput);
$CFoutput = eregi_replace('--A--state--B--',"$state",$CFoutput);
$CFoutput = eregi_replace('--A--province--B--',"$province",$CFoutput);
$CFoutput = eregi_replace('--A--postal_code--B--',"$postal_code",$CFoutput);
$CFoutput = eregi_replace('--A--country_code--B--',"$country_code",$CFoutput);
$CFoutput = eregi_replace('--A--gender--B--',"$gender",$CFoutput);
$CFoutput = eregi_replace('--A--date_of_birth--B--',"$date_of_birth",$CFoutput);
$CFoutput = eregi_replace('--A--alt_phone--B--',"$alt_phone",$CFoutput);
$CFoutput = eregi_replace('--A--email--B--',"$email",$CFoutput);
$CFoutput = eregi_replace('--A--security_phrase--B--',"$security_phrase",$CFoutput);
$CFoutput = eregi_replace('--A--comments--B--',"$comments",$CFoutput);
$CFoutput = eregi_replace('--A--user--B--',"$user",$CFoutput);
$CFoutput = eregi_replace('--A--pass--B--',"$pass",$CFoutput);
$CFoutput = eregi_replace('--A--campaign--B--',"$campaign",$CFoutput);
$CFoutput = eregi_replace('--A--server_ip--B--',"$server_ip",$CFoutput);
$CFoutput = eregi_replace('--A--session_id--B--',"$session_id",$CFoutput);
$CFoutput = eregi_replace('--A--dialed_number--B--',"$dialed_number",$CFoutput);
$CFoutput = eregi_replace('--A--dialed_label--B--',"$dialed_label",$CFoutput);
$CFoutput = eregi_replace('--A--source_id--B--',"$source_id",$CFoutput);
$CFoutput = eregi_replace('--A--rank--B--',"$rank",$CFoutput);
$CFoutput = eregi_replace('--A--owner--B--',"$owner",$CFoutput);
$CFoutput = eregi_replace('--A--fullname--B--',"$fullname",$CFoutput);
$CFoutput = eregi_replace('--A--uniqueid--B--',"$uniqueid",$CFoutput);
$CFoutput = eregi_replace('--A--user_custom_one--B--',"$user_custom_one",$CFoutput);
$CFoutput = eregi_replace('--A--user_custom_two--B--',"$user_custom_two",$CFoutput);
$CFoutput = eregi_replace('--A--user_custom_three--B--',"$user_custom_three",$CFoutput);
$CFoutput = eregi_replace('--A--user_custom_four--B--',"$user_custom_four",$CFoutput);
$CFoutput = eregi_replace('--A--user_custom_five--B--',"$user_custom_five",$CFoutput);
$CFoutput = eregi_replace('--A--preset_number_a--B--',"$preset_number_a",$CFoutput);
$CFoutput = eregi_replace('--A--preset_number_b--B--',"$preset_number_b",$CFoutput);
$CFoutput = eregi_replace('--A--preset_number_c--B--',"$preset_number_c",$CFoutput);
$CFoutput = eregi_replace('--A--preset_number_d--B--',"$preset_number_d",$CFoutput);
$CFoutput = eregi_replace('--A--preset_number_e--B--',"$preset_number_e",$CFoutput);
$CFoutput = eregi_replace('--A--preset_dtmf_a--B--',"$preset_dtmf_a",$CFoutput);
$CFoutput = eregi_replace('--A--preset_dtmf_b--B--',"$preset_dtmf_b",$CFoutput);
$CFoutput = eregi_replace('--A--did_id--B--',"$did_id",$CFoutput);
$CFoutput = eregi_replace('--A--did_extension--B--',"$did_extension",$CFoutput);
$CFoutput = eregi_replace('--A--did_pattern--B--',"$did_pattern",$CFoutput);
$CFoutput = eregi_replace('--A--did_description--B--',"$did_description",$CFoutput);
$CFoutput = eregi_replace('--A--closecallid--B--',"$closecallid",$CFoutput);
$CFoutput = eregi_replace('--A--xfercallid--B--',"$xfercallid",$CFoutput);
$CFoutput = eregi_replace('--A--agent_log_id--B--',"$agent_log_id",$CFoutput);
$CFoutput = eregi_replace('--A--call_id--B--',"$call_id",$CFoutput);
$CFoutput = preg_replace('/--A--lead_id--B--/i',"$lead_id",$CFoutput);
$CFoutput = preg_replace('/--A--vendor_id--B--/i',"$vendor_id",$CFoutput);
$CFoutput = preg_replace('/--A--vendor_lead_code--B--/i',"$vendor_lead_code",$CFoutput);
$CFoutput = preg_replace('/--A--list_id--B--/i',"$list_id",$CFoutput);
$CFoutput = preg_replace('/--A--gmt_offset_now--B--/i',"$gmt_offset_now",$CFoutput);
$CFoutput = preg_replace('/--A--phone_code--B--/i',"$phone_code",$CFoutput);
$CFoutput = preg_replace('/--A--phone_number--B--/i',"$phone_number",$CFoutput);
$CFoutput = preg_replace('/--A--title--B--/i',"$title",$CFoutput);
$CFoutput = preg_replace('/--A--first_name--B--/i',"$first_name",$CFoutput);
$CFoutput = preg_replace('/--A--middle_initial--B--/i',"$middle_initial",$CFoutput);
$CFoutput = preg_replace('/--A--last_name--B--/i',"$last_name",$CFoutput);
$CFoutput = preg_replace('/--A--address1--B--/i',"$address1",$CFoutput);
$CFoutput = preg_replace('/--A--address2--B--/i',"$address2",$CFoutput);
$CFoutput = preg_replace('/--A--address3--B--/i',"$address3",$CFoutput);
$CFoutput = preg_replace('/--A--city--B--/i',"$city",$CFoutput);
$CFoutput = preg_replace('/--A--state--B--/i',"$state",$CFoutput);
$CFoutput = preg_replace('/--A--province--B--/i',"$province",$CFoutput);
$CFoutput = preg_replace('/--A--postal_code--B--/i',"$postal_code",$CFoutput);
$CFoutput = preg_replace('/--A--country_code--B--/i',"$country_code",$CFoutput);
$CFoutput = preg_replace('/--A--gender--B--/i',"$gender",$CFoutput);
$CFoutput = preg_replace('/--A--date_of_birth--B--/i',"$date_of_birth",$CFoutput);
$CFoutput = preg_replace('/--A--alt_phone--B--/i',"$alt_phone",$CFoutput);
$CFoutput = preg_replace('/--A--email--B--/i',"$email",$CFoutput);
$CFoutput = preg_replace('/--A--security_phrase--B--/i',"$security_phrase",$CFoutput);
$CFoutput = preg_replace('/--A--comments--B--/i',"$comments",$CFoutput);
$CFoutput = preg_replace('/--A--user--B--/i',"$user",$CFoutput);
$CFoutput = preg_replace('/--A--pass--B--/i',"$pass",$CFoutput);
$CFoutput = preg_replace('/--A--campaign--B--/i',"$campaign",$CFoutput);
$CFoutput = preg_replace('/--A--server_ip--B--/i',"$server_ip",$CFoutput);
$CFoutput = preg_replace('/--A--session_id--B--/i',"$session_id",$CFoutput);
$CFoutput = preg_replace('/--A--dialed_number--B--/i',"$dialed_number",$CFoutput);
$CFoutput = preg_replace('/--A--dialed_label--B--/i',"$dialed_label",$CFoutput);
$CFoutput = preg_replace('/--A--source_id--B--/i',"$source_id",$CFoutput);
$CFoutput = preg_replace('/--A--rank--B--/i',"$rank",$CFoutput);
$CFoutput = preg_replace('/--A--owner--B--/i',"$owner",$CFoutput);
$CFoutput = preg_replace('/--A--fullname--B--/i',"$fullname",$CFoutput);
$CFoutput = preg_replace('/--A--uniqueid--B--/i',"$uniqueid",$CFoutput);
$CFoutput = preg_replace('/--A--user_custom_one--B--/i',"$user_custom_one",$CFoutput);
$CFoutput = preg_replace('/--A--user_custom_two--B--/i',"$user_custom_two",$CFoutput);
$CFoutput = preg_replace('/--A--user_custom_three--B--/i',"$user_custom_three",$CFoutput);
$CFoutput = preg_replace('/--A--user_custom_four--B--/i',"$user_custom_four",$CFoutput);
$CFoutput = preg_replace('/--A--user_custom_five--B--/i',"$user_custom_five",$CFoutput);
$CFoutput = preg_replace('/--A--preset_number_a--B--/i',"$preset_number_a",$CFoutput);
$CFoutput = preg_replace('/--A--preset_number_b--B--/i',"$preset_number_b",$CFoutput);
$CFoutput = preg_replace('/--A--preset_number_c--B--/i',"$preset_number_c",$CFoutput);
$CFoutput = preg_replace('/--A--preset_number_d--B--/i',"$preset_number_d",$CFoutput);
$CFoutput = preg_replace('/--A--preset_number_e--B--/i',"$preset_number_e",$CFoutput);
$CFoutput = preg_replace('/--A--preset_dtmf_a--B--/i',"$preset_dtmf_a",$CFoutput);
$CFoutput = preg_replace('/--A--preset_dtmf_b--B--/i',"$preset_dtmf_b",$CFoutput);
$CFoutput = preg_replace('/--A--did_id--B--/i',"$did_id",$CFoutput);
$CFoutput = preg_replace('/--A--did_extension--B--/i',"$did_extension",$CFoutput);
$CFoutput = preg_replace('/--A--did_pattern--B--/i',"$did_pattern",$CFoutput);
$CFoutput = preg_replace('/--A--did_description--B--/i',"$did_description",$CFoutput);
$CFoutput = preg_replace('/--A--closecallid--B--/i',"$closecallid",$CFoutput);
$CFoutput = preg_replace('/--A--xfercallid--B--/i',"$xfercallid",$CFoutput);
$CFoutput = preg_replace('/--A--agent_log_id--B--/i',"$agent_log_id",$CFoutput);
$CFoutput = preg_replace('/--A--call_id--B--/i',"$call_id",$CFoutput);
# custom fields replacement
$o=0;
while ($fields_to_print > $o)
{
$CFoutput = eregi_replace("--A--$A_field_label[$o]--B--","$A_field_value[$o]",$CFoutput);
$CFoutput = preg_replace("/--A--$A_field_label[$o]--B--/i","$A_field_value[$o]",$CFoutput);
$o++;
}
@@ -520,7 +521,7 @@ function lookup_gmt($phone_code,$USarea,$state,$LOCAL_GMT_OFF_STD,$Shour,$Smin,$
require("dbconnect.php");
$postalgmt_found=0;
if ( (eregi("POSTAL",$postalgmt)) && (strlen($postal_code)>4) )
if ( (preg_match("/POSTAL/i",$postalgmt)) && (strlen($postal_code)>4) )
{
if (preg_match('/^1$/', $phone_code))
{
@@ -530,7 +531,7 @@ function lookup_gmt($phone_code,$USarea,$state,$LOCAL_GMT_OFF_STD,$Shour,$Smin,$
if ($pc_recs > 0)
{
$row=mysql_fetch_row($rslt);
$gmt_offset = $row[2]; $gmt_offset = eregi_replace("\+","",$gmt_offset);
$gmt_offset = $row[2]; $gmt_offset = preg_replace("/\+/i","",$gmt_offset);
$dst = $row[3];
$dst_range = $row[4];
$PC_processed++;
@@ -551,7 +552,7 @@ function lookup_gmt($phone_code,$USarea,$state,$LOCAL_GMT_OFF_STD,$Shour,$Smin,$
if ($pc_recs > 0)
{
$row=mysql_fetch_row($rslt);
$gmt_offset = $row[4]; $gmt_offset = eregi_replace("\+","",$gmt_offset);
$gmt_offset = $row[4]; $gmt_offset = preg_replace("/\+/i","",$gmt_offset);
$dst = $row[5];
$dst_range = $row[6];
$PC_processed++;
@@ -566,7 +567,7 @@ function lookup_gmt($phone_code,$USarea,$state,$LOCAL_GMT_OFF_STD,$Shour,$Smin,$
if ($pc_recs > 0)
{
$row=mysql_fetch_row($rslt);
$gmt_offset = $row[4]; $gmt_offset = eregi_replace("\+","",$gmt_offset);
$gmt_offset = $row[4]; $gmt_offset = preg_replace("/\+/i","",$gmt_offset);
$dst = $row[5];
$dst_range = $row[6];
$PC_processed++;
@@ -581,7 +582,7 @@ function lookup_gmt($phone_code,$USarea,$state,$LOCAL_GMT_OFF_STD,$Shour,$Smin,$
if ($pc_recs > 0)
{
$row=mysql_fetch_row($rslt);
$gmt_offset = $row[4]; $gmt_offset = eregi_replace("\+","",$gmt_offset);
$gmt_offset = $row[4]; $gmt_offset = preg_replace("/\+/i","",$gmt_offset);
$dst = $row[5];
$dst_range = $row[6];
$PC_processed++;
@@ -597,7 +598,7 @@ function lookup_gmt($phone_code,$USarea,$state,$LOCAL_GMT_OFF_STD,$Shour,$Smin,$
if ($pc_recs > 0)
{
$row=mysql_fetch_row($rslt);
$gmt_offset = $row[4]; $gmt_offset = eregi_replace("\+","",$gmt_offset);
$gmt_offset = $row[4]; $gmt_offset = preg_replace("/\+/i","",$gmt_offset);
$dst = $row[5];
$dst_range = $row[6];
$PC_processed++;
+11 -10
View File
@@ -1,7 +1,7 @@
<?php
# inbound_popup.php version 2.2.0
# inbound_popup.php version 2.6
#
# Copyright (C) 2009 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed to open up when a live_inbound call comes in giving the user
# options of what to do with the call or options to lookup the callerID on various web sites
@@ -31,6 +31,7 @@
# 60421-1043 - check GET/POST vars lines with isset to not trigger PHP NOTICES
# 60619-1205 - Added variable filters to close security holes for login form
# 90508-0727 - Changed to PHP long tags
# 130328-0025 - Converted ereg to preg functions
#
require("dbconnect.php");
@@ -63,20 +64,20 @@ if (isset($_GET["local_web_callerID_URL_enc"])) {$local_web_callerID_URL_enc=$
if (isset($_GET["local_web_callerID_URL_enc"])) {$local_web_callerID_URL = rawurldecode($local_web_callerID_URL_enc);}
else {$local_web_callerID_URL = '';}
$user=ereg_replace("[^0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
$user=preg_replace("/[^0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^0-9a-zA-Z]/","",$pass);
# default optional vars if not set
if (!isset($format)) {$format="text";}
$version = '0.0.6';
$build = '60619-1205';
$version = '0.0.7';
$build = '130328-0025';
$StarTtime = date("U");
$NOW_DATE = date("Y-m-d");
$NOW_TIME = date("Y-m-d H:i:s");
if (!isset($query_date)) {$query_date = $NOW_DATE;}
$DO = '-1';
if ( (eregi("^Zap",$channel)) and (!eregi("-",$channel)) ) {$channel = "$channel$DO";}
if ( (preg_match("/^Zap/i",$channel)) and (!preg_match("/-/i",$channel)) ) {$channel = "$channel$DO";}
$stmt="SELECT count(*) from vicidial_users where user='$user' and pass='$pass' and user_level > 0;";
if ($DB) {echo "|$stmt|\n";}
@@ -121,7 +122,7 @@ if ($format=='debug')
$forever_stop=0;
$user_abb = "$user$user$user$user";
while ( (strlen($user_abb) > 4) and ($forever_stop < 200) )
{$user_abb = eregi_replace("^.","",$user_abb); $forever_stop++;}
{$user_abb = preg_replace("/^./i","",$user_abb); $forever_stop++;}
echo "<html>\n";
echo "<head>\n";
@@ -286,8 +287,8 @@ else
echo "<tr bgcolor=\"#DDDDFF\"><td>CallerID: </td><td align=left>$row[3]</td></tr>\n";
echo "<tr bgcolor=\"#DDDDFF\"><td colspan=2 align=center>\n";
$phone = eregi_replace(".*\<","",$row[3]);
$phone = eregi_replace("\>.*","",$phone);
$phone = preg_replace("/.*\</i","",$row[3]);
$phone = preg_replace("/\>.*/i","",$phone);
$NPA = substr($phone, 0, 3);
$NXX = substr($phone, 3, 3);
$XXXX = substr($phone, 6, 4);
+37 -37
View File
@@ -1,7 +1,7 @@
<?php
# live_exten_check.php version 2.2.0
# live_exten_check.php version 2.6
#
# Copyright (C) 2009 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed purely to send whether the client channel is live and to what channel it is connected
# This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table
@@ -30,6 +30,7 @@
# 60619-1203 - Added variable filters to close security holes for login form
# 60825-1029 - Fixed translation variable issue ChannelA
# 90508-0727 - Changed to PHP long tags
# 130328-0027 - Converted ereg to preg functions
#
require("dbconnect.php");
@@ -54,14 +55,14 @@ if (isset($_GET["favorites_count"])) {$favorites_count=$_GET["favorites_count
if (isset($_GET["favorites_list"])) {$favorites_list=$_GET["favorites_list"];}
elseif (isset($_POST["favorites_list"])) {$favorites_list=$_POST["favorites_list"];}
$user=ereg_replace("[^0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
$user=preg_replace("/[^0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^0-9a-zA-Z]/","",$pass);
# default optional vars if not set
if (!isset($format)) {$format="text";}
$version = '2.0.1';
$build = '60825-1029';
$version = '2.6-13';
$build = '130328-0027';
$StarTtime = date("U");
$NOW_DATE = date("Y-m-d");
$NOW_TIME = date("Y-m-d H:i:s");
@@ -73,14 +74,13 @@ if (!isset($query_date)) {$query_date = $NOW_DATE;}
$row=mysql_fetch_row($rslt);
$auth=$row[0];
if( (strlen($user)<2) or (strlen($pass)<2) or ($auth==0))
if( (strlen($user)<2) or (strlen($pass)<2) or ($auth==0))
{
echo "Invalid Username/Password: |$user|$pass|\n";
exit;
}
else
else
{
if( (strlen($server_ip)<6) or (!isset($server_ip)) or ( (strlen($session_name)<12) or (!isset($session_name)) ) )
{
echo "Invalid server_ip: |$server_ip| or Invalid session_name: |$session_name|\n";
@@ -93,12 +93,12 @@ if (!isset($query_date)) {$query_date = $NOW_DATE;}
$rslt=mysql_query($stmt, $link);
$row=mysql_fetch_row($rslt);
$SNauth=$row[0];
if($SNauth==0)
if($SNauth==0)
{
echo "Invalid session_name: |$session_name|$server_ip|\n";
exit;
}
else
else
{
# do nothing for now
}
@@ -106,15 +106,15 @@ if (!isset($query_date)) {$query_date = $NOW_DATE;}
}
if ($format=='debug')
{
echo "<html>\n";
echo "<head>\n";
echo "<!-- VERSION: $version BUILD: $build EXTEN: $exten server_ip: $server_ip-->\n";
echo "<title>Live Extension Check";
echo "</title>\n";
echo "</head>\n";
echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>\n";
}
{
echo "<html>\n";
echo "<head>\n";
echo "<!-- VERSION: $version BUILD: $build EXTEN: $exten server_ip: $server_ip-->\n";
echo "<title>Live Extension Check";
echo "</title>\n";
echo "</head>\n";
echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>\n";
}
echo "DateTime: $NOW_TIME|";
@@ -126,16 +126,16 @@ $rslt=mysql_query($stmt, $link);
$row=mysql_fetch_row($rslt);
echo "$row[0]|";
$MT[0]='';
$row=''; $rowx='';
$channel_live=1;
if ( (strlen($exten)<1) or (strlen($protocol)<3) )
$MT[0]='';
$row=''; $rowx='';
$channel_live=1;
if ( (strlen($exten)<1) or (strlen($protocol)<3) )
{
$channel_live=0;
echo "Exten $exten is not valid or protocol $protocol is not valid\n";
exit;
}
else
else
{
$stmt="SELECT channel,extension FROM live_sip_channels where server_ip = '$server_ip' and channel LIKE \"$protocol/$exten%\";";
if ($format=='debug') {echo "\n<!-- $stmt -->";}
@@ -143,7 +143,7 @@ echo "$row[0]|";
if ($rslt) {$channels_list = mysql_num_rows($rslt);}
echo "$channels_list|";
$loop_count=0;
while ($channels_list>$loop_count)
while ($channels_list>$loop_count)
{
$loop_count++;
$row=mysql_fetch_row($rslt);
@@ -153,15 +153,15 @@ echo "$row[0]|";
}
}
$counter=0;
while($loop_count > $counter)
$counter=0;
while($loop_count > $counter)
{
$counter++;
$stmt="SELECT channel FROM live_channels where server_ip = '$server_ip' and channel_data = '$ChanneLA[$counter]';";
if ($format=='debug') {echo "\n<!-- $stmt -->";}
$rslt=mysql_query($stmt, $link);
if ($rslt) {$trunk_count = mysql_num_rows($rslt);}
if ($trunk_count>0)
if ($trunk_count>0)
{
$row=mysql_fetch_row($rslt);
echo "Conversation: $counter ~";
@@ -169,13 +169,13 @@ echo "$row[0]|";
echo "ChannelB: $ChanneLB[$counter] ~";
echo "ChannelBtrunk: $row[0]|";
}
else
else
{
$stmt="SELECT channel FROM live_sip_channels where server_ip = '$server_ip' and channel_data = '$ChanneLA[$counter]';";
if ($format=='debug') {echo "\n<!-- $stmt -->";}
$rslt=mysql_query($stmt, $link);
if ($rslt) {$trunk_count = mysql_num_rows($rslt);}
if ($trunk_count>0)
if ($trunk_count>0)
{
$row=mysql_fetch_row($rslt);
echo "Conversation: $counter ~";
@@ -183,13 +183,13 @@ echo "$row[0]|";
echo "ChannelB: $ChanneLB[$counter] ~";
echo "ChannelBtrunk: $row[0]|";
}
else
else
{
$stmt="SELECT channel FROM live_sip_channels where server_ip = '$server_ip' and channel LIKE \"$ChanneLB[$counter]%\";";
if ($format=='debug') {echo "\n<!-- $stmt -->";}
$rslt=mysql_query($stmt, $link);
if ($rslt) {$trunk_count = mysql_num_rows($rslt);}
if ($trunk_count>0)
if ($trunk_count>0)
{
$row=mysql_fetch_row($rslt);
echo "Conversation: $counter ~";
@@ -197,13 +197,13 @@ echo "$row[0]|";
echo "ChannelB: $ChanneLB[$counter] ~";
echo "ChannelBtrunk: $row[0]|";
}
else
else
{
$stmt="SELECT channel FROM live_channels where server_ip = '$server_ip' and channel LIKE \"$ChanneLB[$counter]%\";";
if ($format=='debug') {echo "\n<!-- $stmt -->";}
$rslt=mysql_query($stmt, $link);
if ($rslt) {$trunk_count = mysql_num_rows($rslt);}
if ($trunk_count>0)
if ($trunk_count>0)
{
$row=mysql_fetch_row($rslt);
echo "Conversation: $counter ~";
@@ -211,7 +211,7 @@ echo "$row[0]|";
echo "ChannelB: $ChanneLB[$counter] ~";
echo "ChannelBtrunk: $row[0]|";
}
else
else
{
echo "Conversation: $counter ~";
echo "ChannelA: $ChanneLA[$counter] ~";
@@ -230,7 +230,7 @@ $stmt="select * from live_inbound where server_ip = '$server_ip' and phone_ext =
if ($format=='debug') {echo "\n<!-- $stmt -->";}
$rslt=mysql_query($stmt, $link);
if ($rslt) {$channels_list = mysql_num_rows($rslt);}
if ($channels_list>0)
if ($channels_list>0)
{
$row=mysql_fetch_row($rslt);
$LIuniqueid = "$row[0]";
+39 -38
View File
@@ -113,10 +113,11 @@
# 120831-1458 - Added vicidial_dial_log outbound call logging
# 121120-0848 - Added QM socket-send functionality
# 130108-1641 - Change for Asterisk 1.8 compatibility
# 130328-0008 - Converted ereg to preg functions
#
$version = '2.6-60';
$build = '130108-1641';
$version = '2.6-61';
$build = '130328-0008';
$mel=1; # Mysql Error Log enabled = 1
$mysql_log_count=119;
$one_mysql_log=0;
@@ -237,14 +238,14 @@ if ($qm_conf_ct > 0)
if ($non_latin < 1)
{
$user=ereg_replace("[^-_0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^-_0-9a-zA-Z]","",$pass);
$secondS = ereg_replace("[^0-9]","",$secondS);
$user=preg_replace("/[^-_0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^-_0-9a-zA-Z]/","",$pass);
$secondS = preg_replace("/[^0-9]/","",$secondS);
}
else
{
$user = ereg_replace("'|\"|\\\\|;","",$user);
$pass = ereg_replace("'|\"|\\\\|;","",$pass);
$user = preg_replace("/\'|\"|\\\\|;/","",$user);
$pass = preg_replace("/\'|\"|\\\\|;/","",$pass);
}
@@ -419,7 +420,7 @@ if ($ACTION=="OriginateNameVmail")
if ($ACTION=="OriginateVDRelogin")
{
if ( ($enable_sipsak_messages > 0) and ($allow_sipsak_messages > 0) and (eregi("SIP",$protocol)) )
if ( ($enable_sipsak_messages > 0) and ($allow_sipsak_messages > 0) and (preg_match("/SIP/i",$protocol)) )
{
$CIDdate = date("ymdHis");
$DS='-';
@@ -440,7 +441,7 @@ if ($ACTION=="Originate")
}
else
{
if ( (eregi('MANUAL',$agent_dialed_type)) and ( (preg_match("/^\d860\d\d\d\d$/i",$exten)) or (preg_match("/^860\d\d\d\d$/i",$exten)) ) )
if ( (preg_match('/MANUAL/i',$agent_dialed_type)) and ( (preg_match("/^\d860\d\d\d\d$/i",$exten)) or (preg_match("/^860\d\d\d\d$/i",$exten)) ) )
{
echo "ERROR You are not allowed to dial into other agent sessions $exten\n";
exit;
@@ -540,7 +541,7 @@ if ($ACTION=="HangupConfDial")
$rowx=mysql_fetch_row($rslt);
$channel=$rowx[0];
$ACTION="Hangup";
$queryCID = eregi_replace("^.","G",$queryCID); # GTvdcW...
$queryCID = preg_replace("/^./i","G",$queryCID); # GTvdcW...
}
}
}
@@ -1331,7 +1332,7 @@ if ($ACTION=="RedirectXtraCXNeW")
$row=''; $rowx='';
$channel_liveX=1;
$channel_liveY=1;
if ( (strlen($channel)<3) or (strlen($queryCID)<15) or (strlen($ext_context)<1) or (strlen($ext_priority)<1) or (strlen($session_id)<3) or ( ( (strlen($extrachannel)<3) or (strlen($exten)<1) ) and (!ereg("NEXTAVAILABLE",$exten)) ) )
if ( (strlen($channel)<3) or (strlen($queryCID)<15) or (strlen($ext_context)<1) or (strlen($ext_priority)<1) or (strlen($session_id)<3) or ( ( (strlen($extrachannel)<3) or (strlen($exten)<1) ) and (!preg_match("/NEXTAVAILABLE/",$exten)) ) )
{
$channel_liveX=0;
$channel_liveY=0;
@@ -1343,7 +1344,7 @@ if ($ACTION=="RedirectXtraCXNeW")
echo "ext_context $ext_context must be set\n";
echo "ext_priority $ext_priority must be set\n";
echo "\nRedirect Action not sent\n";
if (ereg("SECOND|FIRST|DEBUG",$filename))
if (preg_match("/SECOND|FIRST|DEBUG/",$filename))
{
if ($WeBRooTWritablE > 0)
{
@@ -1355,7 +1356,7 @@ if ($ACTION=="RedirectXtraCXNeW")
}
else
{
if (ereg("NEXTAVAILABLE",$exten))
if (preg_match("/NEXTAVAILABLE/",$exten))
{
$stmtA="SELECT count(*) FROM vicidial_conferences where server_ip='$server_ip' and ((extension='') or (extension is null)) and conf_exten != '$session_id';";
if ($format=='debug') {echo "\n<!-- $stmtA -->";}
@@ -1376,7 +1377,7 @@ if ($ACTION=="RedirectXtraCXNeW")
$row=mysql_fetch_row($rslt);
$exten = $row[0];
if ( (ereg("^8300",$extension)) and ($protocol == 'Local') )
if ( (preg_match("/^8300/i",$extension)) and ($protocol == 'Local') )
{
$extension = "$extension$user";
}
@@ -1423,7 +1424,7 @@ if ($ACTION=="RedirectXtraCXNeW")
{
$channel_liveX=0;
echo "Cannot find empty vicidial_conference on $server_ip, Redirect command not inserted\n|$stmt|";
if (ereg("SECOND|FIRST|DEBUG",$filename)) {$DBout .= "Cannot find empty conference on $server_ip";}
if (preg_match("/SECOND|FIRST|DEBUG/",$filename)) {$DBout .= "Cannot find empty conference on $server_ip";}
}
}
@@ -1445,7 +1446,7 @@ if ($ACTION=="RedirectXtraCXNeW")
{
$channel_liveX=0;
echo "Channel $channel is not live on $call_server_ip, Redirect command not inserted\n";
if (ereg("SECOND|FIRST|DEBUG",$filename)) {$DBout .= "$channel is not live on $call_server_ip";}
if (preg_match("/SECOND|FIRST|DEBUG/",$filename)) {$DBout .= "$channel is not live on $call_server_ip";}
}
}
$stmt="SELECT count(*) FROM live_channels where server_ip = '$server_ip' and channel='$extrachannel';";
@@ -1464,7 +1465,7 @@ if ($ACTION=="RedirectXtraCXNeW")
{
$channel_liveY=0;
echo "Channel $channel is not live on $server_ip, Redirect command not inserted\n";
if (ereg("SECOND|FIRST|DEBUG",$filename)) {$DBout .= "$channel is not live on $server_ip";}
if (preg_match("/SECOND|FIRST|DEBUG/",$filename)) {$DBout .= "$channel is not live on $server_ip";}
}
}
if ( ($channel_liveX==1) and ($channel_liveY==1) )
@@ -1478,7 +1479,7 @@ if ($ACTION=="RedirectXtraCXNeW")
{
$channel_liveY=0;
echo "No Local agent to send call to, Redirect command not inserted\n";
if (ereg("SECOND|FIRST|DEBUG",$filename)) {$DBout .= "No Local agent to send call to";}
if (preg_match("/SECOND|FIRST|DEBUG/",$filename)) {$DBout .= "No Local agent to send call to";}
}
else
{
@@ -1514,7 +1515,7 @@ if ($ACTION=="RedirectXtraCXNeW")
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'02044',$user,$server_ip,$session_name,$one_mysql_log);}
echo "RedirectXtraCX command sent for Channel $channel on $call_server_ip and \nHungup $extrachannel on $server_ip\n";
if (ereg("SECOND|FIRST|DEBUG",$filename)) {$DBout .= "$channel on $call_server_ip, Hungup $extrachannel on $server_ip";}
if (preg_match("/SECOND|FIRST|DEBUG/",$filename)) {$DBout .= "$channel on $call_server_ip, Hungup $extrachannel on $server_ip";}
}
}
else
@@ -1523,10 +1524,10 @@ if ($ACTION=="RedirectXtraCXNeW")
{$ACTION="Redirect"; $server_ip = $call_server_ip;}
if ($channel_liveY==1)
{$ACTION="Redirect"; $channel=$extrachannel;}
if (ereg("SECOND|FIRST|DEBUG",$filename)) {$DBout .= "Changed to Redirect: $channel on $server_ip";}
if (preg_match("/SECOND|FIRST|DEBUG/",$filename)) {$DBout .= "Changed to Redirect: $channel on $server_ip";}
}
if (ereg("SECOND|FIRST|DEBUG",$filename))
if (preg_match("/SECOND|FIRST|DEBUG/",$filename))
{
if ($WeBRooTWritablE > 0)
{
@@ -1556,7 +1557,7 @@ if ($ACTION=="RedirectXtraNeW")
$row=''; $rowx='';
$channel_liveX=1;
$channel_liveY=1;
if ( (strlen($channel)<3) or (strlen($queryCID)<15) or (strlen($ext_context)<1) or (strlen($ext_priority)<1) or (strlen($session_id)<3) or ( ( (strlen($extrachannel)<3) or (strlen($exten)<1) ) and (!ereg("NEXTAVAILABLE",$exten)) ) )
if ( (strlen($channel)<3) or (strlen($queryCID)<15) or (strlen($ext_context)<1) or (strlen($ext_priority)<1) or (strlen($session_id)<3) or ( ( (strlen($extrachannel)<3) or (strlen($exten)<1) ) and (!preg_match("/NEXTAVAILABLE/",$exten)) ) )
{
$channel_liveX=0;
$channel_liveY=0;
@@ -1569,7 +1570,7 @@ if ($ACTION=="RedirectXtraNeW")
echo "ext_priority $ext_priority must be set\n";
echo "session_id $session_id must be set\n";
echo "\nRedirect Action not sent\n";
if (ereg("SECOND|FIRST|DEBUG",$filename))
if (preg_match("/SECOND|FIRST|DEBUG/",$filename))
{
if ($WeBRooTWritablE > 0)
{
@@ -1581,7 +1582,7 @@ if ($ACTION=="RedirectXtraNeW")
}
else
{
if (ereg("NEXTAVAILABLE",$exten))
if (preg_match("/NEXTAVAILABLE/",$exten))
{
$stmt="SELECT count(*) FROM vicidial_conferences where server_ip='$server_ip' and ((extension='') or (extension is null)) and conf_exten != '$session_id';";
if ($format=='debug') {echo "\n<!-- $stmt -->";}
@@ -1640,7 +1641,7 @@ if ($ACTION=="RedirectXtraNeW")
{
$channel_liveX=0;
echo "Cannot find empty vicidial_conference on $server_ip, Redirect command not inserted\n|$stmt|";
if (ereg("SECOND|FIRST|DEBUG",$filename)) {$DBout .= "Cannot find empty conference on $server_ip";}
if (preg_match("/SECOND|FIRST|DEBUG/",$filename)) {$DBout .= "Cannot find empty conference on $server_ip";}
}
}
@@ -1651,7 +1652,7 @@ if ($ACTION=="RedirectXtraNeW")
$rslt=mysql_query($stmt, $link);
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'02053',$user,$server_ip,$session_name,$one_mysql_log);}
$row=mysql_fetch_row($rslt);
if ( ($row[0]==0) and (!ereg("SECOND",$filename)) )
if ( ($row[0]==0) and (!preg_match("/SECOND/",$filename)) )
{
$stmt="SELECT count(*) FROM live_sip_channels where server_ip = '$call_server_ip' and channel='$channel';";
if ($format=='debug') {echo "\n<!-- $stmt -->";}
@@ -1662,7 +1663,7 @@ if ($ACTION=="RedirectXtraNeW")
{
$channel_liveX=0;
echo "Channel $channel is not live on $call_server_ip, Redirect command not inserted\n";
if (ereg("SECOND|FIRST|DEBUG",$filename)) {$DBout .= "$channel is not live on $call_server_ip";}
if (preg_match("/SECOND|FIRST|DEBUG/",$filename)) {$DBout .= "$channel is not live on $call_server_ip";}
}
}
$stmt="SELECT count(*) FROM live_channels where server_ip = '$server_ip' and channel='$extrachannel';";
@@ -1670,7 +1671,7 @@ if ($ACTION=="RedirectXtraNeW")
$rslt=mysql_query($stmt, $link);
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'02055',$user,$server_ip,$session_name,$one_mysql_log);}
$row=mysql_fetch_row($rslt);
if ( ($row[0]==0) and (!ereg("SECOND",$filename)) )
if ( ($row[0]==0) and (!preg_match("/SECOND/",$filename)) )
{
$stmt="SELECT count(*) FROM live_sip_channels where server_ip = '$server_ip' and channel='$extrachannel';";
if ($format=='debug') {echo "\n<!-- $stmt -->";}
@@ -1681,7 +1682,7 @@ if ($ACTION=="RedirectXtraNeW")
{
$channel_liveY=0;
echo "Channel $channel is not live on $server_ip, Redirect command not inserted\n";
if (ereg("SECOND|FIRST|DEBUG",$filename)) {$DBout .= "$channel is not live on $server_ip";}
if (preg_match("/SECOND|FIRST|DEBUG/",$filename)) {$DBout .= "$channel is not live on $server_ip";}
}
}
if ( ($channel_liveX==1) and ($channel_liveY==1) )
@@ -1694,7 +1695,7 @@ if ($ACTION=="RedirectXtraNeW")
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'02057',$user,$server_ip,$session_name,$one_mysql_log);}
echo "RedirectXtra command sent for Channel $channel and \nExtraChannel $extrachannel\n to $exten on $server_ip\n";
if (ereg("SECOND|FIRST|DEBUG",$filename)) {$DBout .= "$channel and $extrachannel to $exten on $server_ip";}
if (preg_match("/SECOND|FIRST|DEBUG/",$filename)) {$DBout .= "$channel and $extrachannel to $exten on $server_ip";}
}
else
{
@@ -1721,7 +1722,7 @@ if ($ACTION=="RedirectXtraNeW")
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'02059',$user,$server_ip,$session_name,$one_mysql_log);}
echo "RedirectXtra command sent for Channel $channel on $call_server_ip and \nExtraChannel $extrachannel\n to $exten on $server_ip\n";
if (ereg("SECOND|FIRST|DEBUG",$filename)) {$DBout .= "$channel/$call_server_ip and $extrachannel/$server_ip to $exten";}
if (preg_match("/SECOND|FIRST|DEBUG/",$filename)) {$DBout .= "$channel/$call_server_ip and $extrachannel/$server_ip to $exten";}
}
}
else
@@ -1732,7 +1733,7 @@ if ($ACTION=="RedirectXtraNeW")
{$ACTION="Redirect"; $channel=$extrachannel;}
}
if (ereg("SECOND|FIRST|DEBUG",$filename))
if (preg_match("/SECOND|FIRST|DEBUG/",$filename))
{
if ($WeBRooTWritablE > 0)
{
@@ -1771,8 +1772,8 @@ if ($ACTION=="Redirect")
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'02061',$user,$server_ip,$session_name,$one_mysql_log);}
$rowx=mysql_fetch_row($rslt);
$channel=$rowx[0];
$channel = eregi_replace("1$","2",$channel);
$queryCID = eregi_replace("^.","Q",$queryCID);
$channel = preg_replace("/1$/i","2",$channel);
$queryCID = preg_replace("/^./i","Q",$queryCID);
}
}
@@ -2095,10 +2096,10 @@ if ($ACTION=="VolumeControl")
else
{
$participant_number='XXYYXXYYXXYYXX';
if (eregi('UP',$stage)) {$vol_prefix='4';}
if (eregi('DOWN',$stage)) {$vol_prefix='3';}
if (eregi('UNMUTE',$stage)) {$vol_prefix='2';}
if (eregi('MUTING',$stage)) {$vol_prefix='1';}
if (preg_match('/UP/i',$stage)) {$vol_prefix='4';}
if (preg_match('/DOWN/i',$stage)) {$vol_prefix='3';}
if (preg_match('/UNMUTE/i',$stage)) {$vol_prefix='2';}
if (preg_match('/MUTING/i',$stage)) {$vol_prefix='1';}
$local_DEF = 'Local/';
$local_AMP = '@';
$volume_local_channel = "$local_DEF$participant_number$vol_prefix$exten$local_AMP$ext_context";
+5 -4
View File
@@ -1,7 +1,7 @@
<?php
# park_calls_display.php version 2.2.0
# park_calls_display.php version 2.6
#
# Copyright (C) 2009 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed purely to send the details on the parked calls on the server
# This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table
@@ -23,6 +23,7 @@
# 60421-1111 - check GET/POST vars lines with isset to not trigger PHP NOTICES
# 60619-1205 - Added variable filters to close security holes for login form
# 90508-0727 - Changed to PHP long tags
# 130328-0024 - Converted ereg to preg functions
#
require("dbconnect.php");
@@ -43,8 +44,8 @@ if (isset($_GET["exten"])) {$exten=$_GET["exten"];}
if (isset($_GET["protocol"])) {$protocol=$_GET["protocol"];}
elseif (isset($_POST["protocol"])) {$protocol=$_POST["protocol"];}
$user=ereg_replace("[^0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
$user=preg_replace("/[^0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^0-9a-zA-Z]/","",$pass);
# default optional vars if not set
if (!isset($format)) {$format="text";}
+15 -14
View File
@@ -8,10 +8,11 @@
# 110526-1757 - Added webphone_auto_answer option
# 120223-2124 - Removed logging of good login passwords if webroot writable is enabled
# 130123-1923 - Added ability to use user-login-first options.php option
# 130328-0005 - Converted ereg to preg functions
#
$version = '2.6-4p';
$build = '130123-1923';
$version = '2.6-5p';
$build = '130328-0005';
$mel=1; # Mysql Error Log enabled = 1
$mysql_log_count=73;
$one_mysql_log=0;
@@ -48,11 +49,11 @@ if (!isset($flag_channels))
}
### security strip all non-alphanumeric characters out of the variables ###
$DB=ereg_replace("[^0-9a-z]","",$DB);
$phone_login=ereg_replace("[^\,0-9a-zA-Z]","",$phone_login);
$phone_pass=ereg_replace("[^0-9a-zA-Z]","",$phone_pass);
$VD_login=ereg_replace("[^-_0-9a-zA-Z]","",$VD_login);
$VD_pass=ereg_replace("[^-_0-9a-zA-Z]","",$VD_pass);
$DB=preg_replace("[^0-9a-z]","",$DB);
$phone_login=preg_replace("/[^\,0-9a-zA-Z]/","",$phone_login);
$phone_pass=preg_replace("/[^0-9a-zA-Z]/","",$phone_pass);
$VD_login=preg_replace("/[^-_0-9a-zA-Z]/","",$VD_login);
$VD_pass=preg_replace("/[^-_0-9a-zA-Z]/","",$VD_pass);
$forever_stop=0;
@@ -146,12 +147,12 @@ $browser = getenv("HTTP_USER_AGENT");
$script_name = getenv("SCRIPT_NAME");
$server_name = getenv("SERVER_NAME");
$server_port = getenv("SERVER_PORT");
if (eregi("443",$server_port)) {$HTTPprotocol = 'https://';}
if (preg_match("/443/i",$server_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';}
if (($server_port == '80') or ($server_port == '443') ) {$server_port='';}
else {$server_port = "$CL$server_port";}
$agcPAGE = "$HTTPprotocol$server_name$server_port$script_name";
$agcDIR = eregi_replace('phone_only.php','',$agcPAGE);
$agcDIR = preg_replace('/phone_only\.php/i','',$agcPAGE);
if (strlen($static_agent_url) > 5)
{$agcPAGE = $static_agent_url;}
@@ -371,7 +372,7 @@ else
}
$user_abb = "$VD_login$VD_login$VD_login$VD_login";
while ( (strlen($user_abb) > 4) and ($forever_stop < 200) )
{$user_abb = eregi_replace("^.","",$user_abb); $forever_stop++;}
{$user_abb = preg_replace("/^./i","",$user_abb); $forever_stop++;}
}
else
@@ -450,7 +451,7 @@ else
}
$pa=0;
if ( (eregi(',',$phone_login)) and (strlen($phone_login) > 2) )
if ( (preg_match('/,/',$phone_login)) and (strlen($phone_login) > 2) )
{
$phoneSQL = "(";
$phones_auto = explode(',',$phone_login);
@@ -691,13 +692,13 @@ else
}
$SIP_user = "$protocol/$extension";
$SIP_user_DiaL = "$protocol/$extension";
if ( (ereg('8300',$dialplan_number)) and (strlen($dialplan_number)<5) and ($protocol == 'Local') )
if ( (preg_match('/8300/',$dialplan_number)) and (strlen($dialplan_number)<5) and ($protocol == 'Local') )
{
$SIP_user = "$protocol/$extension$VD_login";
}
$session_ext = eregi_replace("[^a-z0-9]", "", $extension);
$session_ext = preg_replace("/[^a-z0-9]/i", "", $extension);
if (strlen($session_ext) > 10) {$session_ext = substr($session_ext, 0, 10);}
$session_rand = (rand(1,9999999) + 10000000);
$session_name = "$StarTtimE$US$session_ext$session_rand";
@@ -797,7 +798,7 @@ else
$webphone_content = "<iframe src=\"$WebPhonEurl\" style=\"width:1100px;height:500px;background-color:transparent;z-index:17;\" scrolling=\"auto\" frameborder=\"0\" allowtransparency=\"true\" id=\"webphone\" name=\"webphone\" width=\"" . $webphone_width . "px\" height=\"" . $webphone_height . "px\"> </iframe>";
}
if (ereg('MSIE',$browser))
if (preg_match('/MSIE/',$browser))
{
$useIE=1;
echo "<!-- client web browser used: MSIE |$browser|$useIE| -->\n";
+17 -16
View File
@@ -1,7 +1,7 @@
<?php
# timeclock.php - VICIDIAL system user timeclock
#
# Copyright (C) 2009 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# CHANGELOG
# 80523-0134 - First Build
@@ -10,10 +10,11 @@
# 80602-0641 - Fixed status update bug
# 90508-0727 - Changed to PHP long tags
# 100621-1023 - Added admin_web_directory variable
# 130328-0021 - Converted ereg to preg functions
#
$version = '2.2.0-6';
$build = '100621-1023';
$version = '2.6-7';
$build = '130328-0021';
$StarTtimE = date("U");
$NOW_TIME = date("Y-m-d H:i:s");
@@ -29,12 +30,12 @@ $browser = getenv("HTTP_USER_AGENT");
$script_name = getenv("SCRIPT_NAME");
$server_name = getenv("SERVER_NAME");
$server_port = getenv("SERVER_PORT");
if (eregi("443",$server_port)) {$HTTPprotocol = 'https://';}
if (preg_match("/443/i",$server_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';}
if (($server_port == '80') or ($server_port == '443') ) {$server_port='';}
else {$server_port = "$CL$server_port";}
$agcPAGE = "$HTTPprotocol$server_name$server_port$script_name";
$agcDIR = eregi_replace('timeclock.php','',$agcPAGE);
$agcDIR = preg_replace('/timeclock\.php/i','',$agcPAGE);
if (isset($_GET["DB"])) {$DB=$_GET["DB"];}
@@ -72,17 +73,17 @@ if (!isset($phone_pass))
}
### security strip all non-alphanumeric characters out of the variables ###
$DB=ereg_replace("[^0-9a-z]","",$DB);
$phone_login=ereg_replace("[^\,0-9a-zA-Z]","",$phone_login);
$phone_pass=ereg_replace("[^0-9a-zA-Z]","",$phone_pass);
$VD_login=ereg_replace("[^0-9a-zA-Z]","",$VD_login);
$VD_pass=ereg_replace("[^0-9a-zA-Z]","",$VD_pass);
$VD_campaign=ereg_replace("[^0-9a-zA-Z_]","",$VD_campaign);
$user=ereg_replace("[^0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
$stage=ereg_replace("[^0-9a-zA-Z]","",$stage);
$commit=ereg_replace("[^0-9a-zA-Z]","",$commit);
$referrer=ereg_replace("[^0-9a-zA-Z]","",$referrer);
$DB=preg_replace("/[^0-9a-z]/","",$DB);
$phone_login=preg_replace("/[^\,0-9a-zA-Z]/","",$phone_login);
$phone_pass=preg_replace("/[^0-9a-zA-Z]/","",$phone_pass);
$VD_login=preg_replace("/[^0-9a-zA-Z]/","",$VD_login);
$VD_pass=preg_replace("/[^0-9a-zA-Z]/","",$VD_pass);
$VD_campaign=preg_replace("/[^0-9a-zA-Z_]/","",$VD_campaign);
$user=preg_replace("/[^0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^0-9a-zA-Z]/","",$pass);
$stage=preg_replace("/[^0-9a-zA-Z]/","",$stage);
$commit=preg_replace("/[^0-9a-zA-Z]/","",$commit);
$referrer=preg_replace("/[^0-9a-zA-Z]/","",$referrer);
require("dbconnect.php");
+11 -10
View File
@@ -1,7 +1,7 @@
<?php
# vdc_call_url_test.php
#
# Copyright (C) 2010 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed display and log the start_call_url and dispo_call_url
# queries if activated
@@ -9,10 +9,11 @@
# CHANGELOG:
# 100103-1317 - First build of script
# 100113-2023 - Added dispo_name
# 130328-0023 - Converted ereg to preg functions
#
$version = '2.2.0-2';
$build = '100113-2023';
$version = '2.6-3';
$build = '130328-0023';
require("dbconnect.php");
@@ -185,16 +186,16 @@ if ($qm_conf_ct > 0)
if ($non_latin < 1)
{
$user=ereg_replace("[^-_0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^-_0-9a-zA-Z]","",$pass);
$length_in_sec = ereg_replace("[^0-9]","",$length_in_sec);
$phone_code = ereg_replace("[^0-9]","",$phone_code);
$phone_number = ereg_replace("[^0-9]","",$phone_number);
$user=preg_replace("/[^-_0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^-_0-9a-zA-Z]/","",$pass);
$length_in_sec = preg_replace("/[^0-9]/","",$length_in_sec);
$phone_code = preg_replace("/[^0-9]/","",$phone_code);
$phone_number = preg_replace("/[^0-9]/","",$phone_number);
}
else
{
$user = ereg_replace("'|\"|\\\\|;","",$user);
$pass = ereg_replace("'|\"|\\\\|;","",$pass);
$user = preg_replace("/\'|\"|\\\\|;/","",$user);
$pass = preg_replace("/\'|\"|\\\\|;/","",$pass);
}
+453 -452
View File
File diff suppressed because it is too large Load Diff
+5 -4
View File
@@ -12,6 +12,7 @@
# changes:
# 121214-2300 - First Build
# 130127-0027 - Better non-latin characters support
# 130328-0007 - Converted ereg to preg functions
#
require("dbconnect.php");
@@ -113,13 +114,13 @@ if ($allow_emails<1)
if ($non_latin < 1)
{
$user=ereg_replace("[^-_0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^-_0-9a-zA-Z]","",$pass);
$user=preg_replace("/[^-_0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^-_0-9a-zA-Z]/","",$pass);
}
else
{
$user = ereg_replace("'|\"|\\\\|;","",$user);
$pass = ereg_replace("'|\"|\\\\|;","",$pass);
$user = preg_replace("/\'|\"|\\\\|;/","",$user);
$pass = preg_replace("/\'|\"|\\\\|;/","",$pass);
}
+12 -11
View File
@@ -1,7 +1,7 @@
<?php
# vdc_form_display.php
#
# Copyright (C) 2012 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed display the contents of the FORM tab in the agent
# interface, as well as take submission of the form submission when the agent
@@ -16,10 +16,11 @@
# 110730-2335 - Added call_id variable
# 111025-1433 - Fixed case sensitivity on list fields
# 120315-1729 - Filtere out single quotes and backslashes from custom fields
# 130328-0012 - Converted ereg to preg functions
#
$version = '2.4-8';
$build = '120315-1729';
$version = '2.6-9';
$build = '130328-0012';
require("dbconnect.php");
require_once("functions.php");
@@ -189,16 +190,16 @@ if ($qm_conf_ct > 0)
if ($non_latin < 1)
{
$user=ereg_replace("[^-_0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^-_0-9a-zA-Z]","",$pass);
$length_in_sec = ereg_replace("[^0-9]","",$length_in_sec);
$phone_code = ereg_replace("[^0-9]","",$phone_code);
$phone_number = ereg_replace("[^0-9]","",$phone_number);
$user=preg_replace("/[^-_0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^-_0-9a-zA-Z]/","",$pass);
$length_in_sec = preg_replace("/[^0-9]/","",$length_in_sec);
$phone_code = preg_replace("/[^0-9]/","",$phone_code);
$phone_number = preg_replace("/[^0-9]/","",$phone_number);
}
else
{
$user = ereg_replace("'|\"|\\\\|;","",$user);
$pass = ereg_replace("'|\"|\\\\|;","",$pass);
$user = preg_replace("/\'|\"|\\\\|;/","",$user);
$pass = preg_replace("/\'|\"|\\\\|;/","",$pass);
}
@@ -393,7 +394,7 @@ if ($stage=='SUBMIT')
### LOG INSERTION Admin Log Table ###
$ip = getenv("REMOTE_ADDR");
$SQL_log = "$list_table_update_SQL|$custom_table_update_SQL|";
$SQL_log = ereg_replace(';','',$SQL_log);
$SQL_log = preg_replace('/;/','',$SQL_log);
$SQL_log = addslashes($SQL_log);
$stmt="INSERT INTO vicidial_admin_log set event_date='$NOW_TIME', user='$user', ip_address='$ip', event_section='LEADS', event_type='MODIFY', record_id='$lead_id', event_code='ADMIN MODIFY CUSTOM LEAD', event_sql=\"$SQL_log\", event_notes='$custom_update_count|$list_update_count';";
if ($DB) {echo "|$stmt|\n";}
+177 -176
View File
@@ -1,7 +1,7 @@
<?php
# vdc_script_display.php
#
# Copyright (C) 2012 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed display the contents of the SCRIPT tab in the agent interface
#
@@ -17,10 +17,11 @@
# 110420-1201 - Added web_vars variable
# 110730-2339 - Added call_id variable
# 120227-2017 - Added parsing of IGNORENOSCROLL option in script to force scroll
# 130328-0013 - Converted ereg to preg functions
#
$version = '2.4-11';
$build = '120227-2017';
$version = '2.6-12';
$build = '130328-0013';
require("dbconnect.php");
@@ -228,16 +229,16 @@ if ($qm_conf_ct > 0)
if ($non_latin < 1)
{
$user=ereg_replace("[^-_0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^-_0-9a-zA-Z]","",$pass);
$length_in_sec = ereg_replace("[^0-9]","",$length_in_sec);
$phone_code = ereg_replace("[^0-9]","",$phone_code);
$phone_number = ereg_replace("[^0-9]","",$phone_number);
$user=preg_replace("/[^-_0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^-_0-9a-zA-Z]/","",$pass);
$length_in_sec = preg_replace("/[^0-9]/","",$length_in_sec);
$phone_code = preg_replace("/[^0-9]/","",$phone_code);
$phone_number = preg_replace("/[^0-9]/","",$phone_number);
}
else
{
$user = ereg_replace("'|\"|\\\\|;","",$user);
$pass = ereg_replace("'|\"|\\\\|;","",$pass);
$user = preg_replace("/\'|\"|\\\\|;/","",$user);
$pass = preg_replace("/\'|\"|\\\\|;/","",$pass);
}
@@ -315,172 +316,172 @@ $row=mysql_fetch_row($rslt);
$script_name = $row[0];
$script_text = stripslashes($row[1]);
if (eregi("iframe src",$script_text))
if (preg_match("/iframe\ssrc/i",$script_text))
{
$IFRAME=1;
$lead_id = eregi_replace(' ','+',$lead_id);
$vendor_id = eregi_replace(' ','+',$vendor_id);
$vendor_lead_code = eregi_replace(' ','+',$vendor_lead_code);
$list_id = eregi_replace(' ','+',$list_id);
$list_name = eregi_replace(' ','+',$list_name);
$list_description = eregi_replace(' ','+',$list_description);
$gmt_offset_now = eregi_replace(' ','+',$gmt_offset_now);
$phone_code = eregi_replace(' ','+',$phone_code);
$phone_number = eregi_replace(' ','+',$phone_number);
$title = eregi_replace(' ','+',$title);
$first_name = eregi_replace(' ','+',$first_name);
$middle_initial = eregi_replace(' ','+',$middle_initial);
$last_name = eregi_replace(' ','+',$last_name);
$address1 = eregi_replace(' ','+',$address1);
$address2 = eregi_replace(' ','+',$address2);
$address3 = eregi_replace(' ','+',$address3);
$city = eregi_replace(' ','+',$city);
$state = eregi_replace(' ','+',$state);
$province = eregi_replace(' ','+',$province);
$postal_code = eregi_replace(' ','+',$postal_code);
$country_code = eregi_replace(' ','+',$country_code);
$gender = eregi_replace(' ','+',$gender);
$date_of_birth = eregi_replace(' ','+',$date_of_birth);
$alt_phone = eregi_replace(' ','+',$alt_phone);
$email = eregi_replace(' ','+',$email);
$security_phrase = eregi_replace(' ','+',$security_phrase);
$comments = eregi_replace(' ','+',$comments);
$user = eregi_replace(' ','+',$user);
$pass = eregi_replace(' ','+',$pass);
$campaign = eregi_replace(' ','+',$campaign);
$phone_login = eregi_replace(' ','+',$phone_login);
$original_phone_login = eregi_replace(' ','+',$original_phone_login);
$phone_pass = eregi_replace(' ','+',$phone_pass);
$fronter = eregi_replace(' ','+',$fronter);
$closer = eregi_replace(' ','+',$closer);
$group = eregi_replace(' ','+',$group);
$channel_group = eregi_replace(' ','+',$channel_group);
$SQLdate = eregi_replace(' ','+',$SQLdate);
$epoch = eregi_replace(' ','+',$epoch);
$uniqueid = eregi_replace(' ','+',$uniqueid);
$customer_zap_channel = eregi_replace(' ','+',$customer_zap_channel);
$customer_server_ip = eregi_replace(' ','+',$customer_server_ip);
$server_ip = eregi_replace(' ','+',$server_ip);
$SIPexten = eregi_replace(' ','+',$SIPexten);
$session_id = eregi_replace(' ','+',$session_id);
$phone = eregi_replace(' ','+',$phone);
$parked_by = eregi_replace(' ','+',$parked_by);
$dispo = eregi_replace(' ','+',$dispo);
$dialed_number = eregi_replace(' ','+',$dialed_number);
$dialed_label = eregi_replace(' ','+',$dialed_label);
$source_id = eregi_replace(' ','+',$source_id);
$rank = eregi_replace(' ','+',$rank);
$owner = eregi_replace(' ','+',$owner);
$camp_script = eregi_replace(' ','+',$camp_script);
$in_script = eregi_replace(' ','+',$in_script);
$script_width = eregi_replace(' ','+',$script_width);
$script_height = eregi_replace(' ','+',$script_height);
$fullname = eregi_replace(' ','+',$fullname);
$recording_filename = eregi_replace(' ','+',$recording_filename);
$recording_id = eregi_replace(' ','+',$recording_id);
$user_custom_one = eregi_replace(' ','+',$user_custom_one);
$user_custom_two = eregi_replace(' ','+',$user_custom_two);
$user_custom_three = eregi_replace(' ','+',$user_custom_three);
$user_custom_four = eregi_replace(' ','+',$user_custom_four);
$user_custom_five = eregi_replace(' ','+',$user_custom_five);
$preset_number_a = eregi_replace(' ','+',$preset_number_a);
$preset_number_b = eregi_replace(' ','+',$preset_number_b);
$preset_number_c = eregi_replace(' ','+',$preset_number_c);
$preset_number_d = eregi_replace(' ','+',$preset_number_d);
$preset_number_e = eregi_replace(' ','+',$preset_number_e);
$preset_number_f = eregi_replace(' ','+',$preset_number_f);
$preset_dtmf_a = eregi_replace(' ','+',$preset_dtmf_a);
$preset_dtmf_b = eregi_replace(' ','+',$preset_dtmf_b);
$did_id = eregi_replace(' ','+',$did_id);
$did_extension = eregi_replace(' ','+',$did_extension);
$did_pattern = eregi_replace(' ','+',$did_pattern);
$did_description = eregi_replace(' ','+',$did_description);
$web_vars = eregi_replace(' ','+',$web_vars);
$lead_id = preg_replace('/\s/i','+',$lead_id);
$vendor_id = preg_replace('/\s/i','+',$vendor_id);
$vendor_lead_code = preg_replace('/\s/i','+',$vendor_lead_code);
$list_id = preg_replace('/\s/i','+',$list_id);
$list_name = preg_replace('/\s/i','+',$list_name);
$list_description = preg_replace('/\s/i','+',$list_description);
$gmt_offset_now = preg_replace('/\s/i','+',$gmt_offset_now);
$phone_code = preg_replace('/\s/i','+',$phone_code);
$phone_number = preg_replace('/\s/i','+',$phone_number);
$title = preg_replace('/\s/i','+',$title);
$first_name = preg_replace('/\s/i','+',$first_name);
$middle_initial = preg_replace('/\s/i','+',$middle_initial);
$last_name = preg_replace('/\s/i','+',$last_name);
$address1 = preg_replace('/\s/i','+',$address1);
$address2 = preg_replace('/\s/i','+',$address2);
$address3 = preg_replace('/\s/i','+',$address3);
$city = preg_replace('/\s/i','+',$city);
$state = preg_replace('/\s/i','+',$state);
$province = preg_replace('/\s/i','+',$province);
$postal_code = preg_replace('/\s/i','+',$postal_code);
$country_code = preg_replace('/\s/i','+',$country_code);
$gender = preg_replace('/\s/i','+',$gender);
$date_of_birth = preg_replace('/\s/i','+',$date_of_birth);
$alt_phone = preg_replace('/\s/i','+',$alt_phone);
$email = preg_replace('/\s/i','+',$email);
$security_phrase = preg_replace('/\s/i','+',$security_phrase);
$comments = preg_replace('/\s/i','+',$comments);
$user = preg_replace('/\s/i','+',$user);
$pass = preg_replace('/\s/i','+',$pass);
$campaign = preg_replace('/\s/i','+',$campaign);
$phone_login = preg_replace('/\s/i','+',$phone_login);
$original_phone_login = preg_replace('/\s/i','+',$original_phone_login);
$phone_pass = preg_replace('/\s/i','+',$phone_pass);
$fronter = preg_replace('/\s/i','+',$fronter);
$closer = preg_replace('/\s/i','+',$closer);
$group = preg_replace('/\s/i','+',$group);
$channel_group = preg_replace('/\s/i','+',$channel_group);
$SQLdate = preg_replace('/\s/i','+',$SQLdate);
$epoch = preg_replace('/\s/i','+',$epoch);
$uniqueid = preg_replace('/\s/i','+',$uniqueid);
$customer_zap_channel = preg_replace('/\s/i','+',$customer_zap_channel);
$customer_server_ip = preg_replace('/\s/i','+',$customer_server_ip);
$server_ip = preg_replace('/\s/i','+',$server_ip);
$SIPexten = preg_replace('/\s/i','+',$SIPexten);
$session_id = preg_replace('/\s/i','+',$session_id);
$phone = preg_replace('/\s/i','+',$phone);
$parked_by = preg_replace('/\s/i','+',$parked_by);
$dispo = preg_replace('/\s/i','+',$dispo);
$dialed_number = preg_replace('/\s/i','+',$dialed_number);
$dialed_label = preg_replace('/\s/i','+',$dialed_label);
$source_id = preg_replace('/\s/i','+',$source_id);
$rank = preg_replace('/\s/i','+',$rank);
$owner = preg_replace('/\s/i','+',$owner);
$camp_script = preg_replace('/\s/i','+',$camp_script);
$in_script = preg_replace('/\s/i','+',$in_script);
$script_width = preg_replace('/\s/i','+',$script_width);
$script_height = preg_replace('/\s/i','+',$script_height);
$fullname = preg_replace('/\s/i','+',$fullname);
$recording_filename = preg_replace('/\s/i','+',$recording_filename);
$recording_id = preg_replace('/\s/i','+',$recording_id);
$user_custom_one = preg_replace('/\s/i','+',$user_custom_one);
$user_custom_two = preg_replace('/\s/i','+',$user_custom_two);
$user_custom_three = preg_replace('/\s/i','+',$user_custom_three);
$user_custom_four = preg_replace('/\s/i','+',$user_custom_four);
$user_custom_five = preg_replace('/\s/i','+',$user_custom_five);
$preset_number_a = preg_replace('/\s/i','+',$preset_number_a);
$preset_number_b = preg_replace('/\s/i','+',$preset_number_b);
$preset_number_c = preg_replace('/\s/i','+',$preset_number_c);
$preset_number_d = preg_replace('/\s/i','+',$preset_number_d);
$preset_number_e = preg_replace('/\s/i','+',$preset_number_e);
$preset_number_f = preg_replace('/\s/i','+',$preset_number_f);
$preset_dtmf_a = preg_replace('/\s/i','+',$preset_dtmf_a);
$preset_dtmf_b = preg_replace('/\s/i','+',$preset_dtmf_b);
$did_id = preg_replace('/\s/i','+',$did_id);
$did_extension = preg_replace('/\s/i','+',$did_extension);
$did_pattern = preg_replace('/\s/i','+',$did_pattern);
$did_description = preg_replace('/\s/i','+',$did_description);
$web_vars = preg_replace('/\s/i','+',$web_vars);
}
$script_text = eregi_replace('--A--lead_id--B--',"$lead_id",$script_text);
$script_text = eregi_replace('--A--vendor_id--B--',"$vendor_id",$script_text);
$script_text = eregi_replace('--A--vendor_lead_code--B--',"$vendor_lead_code",$script_text);
$script_text = eregi_replace('--A--list_id--B--',"$list_id",$script_text);
$script_text = eregi_replace('--A--list_name--B--',"$list_name",$script_text);
$script_text = eregi_replace('--A--list_description--B--',"$list_description",$script_text);
$script_text = eregi_replace('--A--gmt_offset_now--B--',"$gmt_offset_now",$script_text);
$script_text = eregi_replace('--A--phone_code--B--',"$phone_code",$script_text);
$script_text = eregi_replace('--A--phone_number--B--',"$phone_number",$script_text);
$script_text = eregi_replace('--A--title--B--',"$title",$script_text);
$script_text = eregi_replace('--A--first_name--B--',"$first_name",$script_text);
$script_text = eregi_replace('--A--middle_initial--B--',"$middle_initial",$script_text);
$script_text = eregi_replace('--A--last_name--B--',"$last_name",$script_text);
$script_text = eregi_replace('--A--address1--B--',"$address1",$script_text);
$script_text = eregi_replace('--A--address2--B--',"$address2",$script_text);
$script_text = eregi_replace('--A--address3--B--',"$address3",$script_text);
$script_text = eregi_replace('--A--city--B--',"$city",$script_text);
$script_text = eregi_replace('--A--state--B--',"$state",$script_text);
$script_text = eregi_replace('--A--province--B--',"$province",$script_text);
$script_text = eregi_replace('--A--postal_code--B--',"$postal_code",$script_text);
$script_text = eregi_replace('--A--country_code--B--',"$country_code",$script_text);
$script_text = eregi_replace('--A--gender--B--',"$gender",$script_text);
$script_text = eregi_replace('--A--date_of_birth--B--',"$date_of_birth",$script_text);
$script_text = eregi_replace('--A--alt_phone--B--',"$alt_phone",$script_text);
$script_text = eregi_replace('--A--email--B--',"$email",$script_text);
$script_text = eregi_replace('--A--security_phrase--B--',"$security_phrase",$script_text);
$script_text = eregi_replace('--A--comments--B--',"$comments",$script_text);
$script_text = eregi_replace('--A--user--B--',"$user",$script_text);
$script_text = eregi_replace('--A--pass--B--',"$pass",$script_text);
$script_text = eregi_replace('--A--campaign--B--',"$campaign",$script_text);
$script_text = eregi_replace('--A--phone_login--B--',"$phone_login",$script_text);
$script_text = eregi_replace('--A--original_phone_login--B--',"$original_phone_login",$script_text);
$script_text = eregi_replace('--A--phone_pass--B--',"$phone_pass",$script_text);
$script_text = eregi_replace('--A--fronter--B--',"$fronter",$script_text);
$script_text = eregi_replace('--A--closer--B--',"$closer",$script_text);
$script_text = eregi_replace('--A--group--B--',"$group",$script_text);
$script_text = eregi_replace('--A--channel_group--B--',"$channel_group",$script_text);
$script_text = eregi_replace('--A--SQLdate--B--',"$SQLdate",$script_text);
$script_text = eregi_replace('--A--epoch--B--',"$epoch",$script_text);
$script_text = eregi_replace('--A--uniqueid--B--',"$uniqueid",$script_text);
$script_text = eregi_replace('--A--customer_zap_channel--B--',"$customer_zap_channel",$script_text);
$script_text = eregi_replace('--A--customer_server_ip--B--',"$customer_server_ip",$script_text);
$script_text = eregi_replace('--A--server_ip--B--',"$server_ip",$script_text);
$script_text = eregi_replace('--A--SIPexten--B--',"$SIPexten",$script_text);
$script_text = eregi_replace('--A--session_id--B--',"$session_id",$script_text);
$script_text = eregi_replace('--A--phone--B--',"$phone",$script_text);
$script_text = eregi_replace('--A--parked_by--B--',"$parked_by",$script_text);
$script_text = eregi_replace('--A--dispo--B--',"$dispo",$script_text);
$script_text = eregi_replace('--A--dialed_number--B--',"$dialed_number",$script_text);
$script_text = eregi_replace('--A--dialed_label--B--',"$dialed_label",$script_text);
$script_text = eregi_replace('--A--source_id--B--',"$source_id",$script_text);
$script_text = eregi_replace('--A--rank--B--',"$rank",$script_text);
$script_text = eregi_replace('--A--owner--B--',"$owner",$script_text);
$script_text = eregi_replace('--A--camp_script--B--',"$camp_script",$script_text);
$script_text = eregi_replace('--A--in_script--B--',"$in_script",$script_text);
$script_text = eregi_replace('--A--script_width--B--',"$script_width",$script_text);
$script_text = eregi_replace('--A--script_height--B--',"$script_height",$script_text);
$script_text = eregi_replace('--A--fullname--B--',"$fullname",$script_text);
$script_text = eregi_replace('--A--recording_filename--B--',"$recording_filename",$script_text);
$script_text = eregi_replace('--A--recording_id--B--',"$recording_id",$script_text);
$script_text = eregi_replace('--A--user_custom_one--B--',"$user_custom_one",$script_text);
$script_text = eregi_replace('--A--user_custom_two--B--',"$user_custom_two",$script_text);
$script_text = eregi_replace('--A--user_custom_three--B--',"$user_custom_three",$script_text);
$script_text = eregi_replace('--A--user_custom_four--B--',"$user_custom_four",$script_text);
$script_text = eregi_replace('--A--user_custom_five--B--',"$user_custom_five",$script_text);
$script_text = eregi_replace('--A--preset_number_a--B--',"$preset_number_a",$script_text);
$script_text = eregi_replace('--A--preset_number_b--B--',"$preset_number_b",$script_text);
$script_text = eregi_replace('--A--preset_number_c--B--',"$preset_number_c",$script_text);
$script_text = eregi_replace('--A--preset_number_d--B--',"$preset_number_d",$script_text);
$script_text = eregi_replace('--A--preset_number_e--B--',"$preset_number_e",$script_text);
$script_text = eregi_replace('--A--preset_number_f--B--',"$preset_number_f",$script_text);
$script_text = eregi_replace('--A--preset_dtmf_a--B--',"$preset_dtmf_a",$script_text);
$script_text = eregi_replace('--A--preset_dtmf_b--B--',"$preset_dtmf_b",$script_text);
$script_text = eregi_replace('--A--did_id--B--',"$did_id",$script_text);
$script_text = eregi_replace('--A--did_extension--B--',"$did_extension",$script_text);
$script_text = eregi_replace('--A--did_pattern--B--',"$did_pattern",$script_text);
$script_text = eregi_replace('--A--did_description--B--',"$did_description",$script_text);
$script_text = eregi_replace('--A--closecallid--B--',"$closecallid",$script_text);
$script_text = eregi_replace('--A--xfercallid--B--',"$xfercallid",$script_text);
$script_text = eregi_replace('--A--agent_log_id--B--',"$agent_log_id",$script_text);
$script_text = eregi_replace('--A--entry_list_id--B--',"$entry_list_id",$script_text);
$script_text = eregi_replace('--A--call_id--B--',"$call_id",$script_text);
$script_text = eregi_replace('--A--web_vars--B--',"$web_vars",$script_text);
$script_text = preg_replace('/--A--lead_id--B--/i',"$lead_id",$script_text);
$script_text = preg_replace('/--A--vendor_id--B--/i',"$vendor_id",$script_text);
$script_text = preg_replace('/--A--vendor_lead_code--B--/i',"$vendor_lead_code",$script_text);
$script_text = preg_replace('/--A--list_id--B--/i',"$list_id",$script_text);
$script_text = preg_replace('/--A--list_name--B--/i',"$list_name",$script_text);
$script_text = preg_replace('/--A--list_description--B--/i',"$list_description",$script_text);
$script_text = preg_replace('/--A--gmt_offset_now--B--/i',"$gmt_offset_now",$script_text);
$script_text = preg_replace('/--A--phone_code--B--/i',"$phone_code",$script_text);
$script_text = preg_replace('/--A--phone_number--B--/i',"$phone_number",$script_text);
$script_text = preg_replace('/--A--title--B--/i',"$title",$script_text);
$script_text = preg_replace('/--A--first_name--B--/i',"$first_name",$script_text);
$script_text = preg_replace('/--A--middle_initial--B--/i',"$middle_initial",$script_text);
$script_text = preg_replace('/--A--last_name--B--/i',"$last_name",$script_text);
$script_text = preg_replace('/--A--address1--B--/i',"$address1",$script_text);
$script_text = preg_replace('/--A--address2--B--/i',"$address2",$script_text);
$script_text = preg_replace('/--A--address3--B--/i',"$address3",$script_text);
$script_text = preg_replace('/--A--city--B--/i',"$city",$script_text);
$script_text = preg_replace('/--A--state--B--/i',"$state",$script_text);
$script_text = preg_replace('/--A--province--B--/i',"$province",$script_text);
$script_text = preg_replace('/--A--postal_code--B--/i',"$postal_code",$script_text);
$script_text = preg_replace('/--A--country_code--B--/i',"$country_code",$script_text);
$script_text = preg_replace('/--A--gender--B--/i',"$gender",$script_text);
$script_text = preg_replace('/--A--date_of_birth--B--/i',"$date_of_birth",$script_text);
$script_text = preg_replace('/--A--alt_phone--B--/i',"$alt_phone",$script_text);
$script_text = preg_replace('/--A--email--B--/i',"$email",$script_text);
$script_text = preg_replace('/--A--security_phrase--B--/i',"$security_phrase",$script_text);
$script_text = preg_replace('/--A--comments--B--/i',"$comments",$script_text);
$script_text = preg_replace('/--A--user--B--/i',"$user",$script_text);
$script_text = preg_replace('/--A--pass--B--/i',"$pass",$script_text);
$script_text = preg_replace('/--A--campaign--B--/i',"$campaign",$script_text);
$script_text = preg_replace('/--A--phone_login--B--/i',"$phone_login",$script_text);
$script_text = preg_replace('/--A--original_phone_login--B--/i',"$original_phone_login",$script_text);
$script_text = preg_replace('/--A--phone_pass--B--/i',"$phone_pass",$script_text);
$script_text = preg_replace('/--A--fronter--B--/i',"$fronter",$script_text);
$script_text = preg_replace('/--A--closer--B--/i',"$closer",$script_text);
$script_text = preg_replace('/--A--group--B--/i',"$group",$script_text);
$script_text = preg_replace('/--A--channel_group--B--/i',"$channel_group",$script_text);
$script_text = preg_replace('/--A--SQLdate--B--/i',"$SQLdate",$script_text);
$script_text = preg_replace('/--A--epoch--B--/i',"$epoch",$script_text);
$script_text = preg_replace('/--A--uniqueid--B--/i',"$uniqueid",$script_text);
$script_text = preg_replace('/--A--customer_zap_channel--B--/i',"$customer_zap_channel",$script_text);
$script_text = preg_replace('/--A--customer_server_ip--B--/i',"$customer_server_ip",$script_text);
$script_text = preg_replace('/--A--server_ip--B--/i',"$server_ip",$script_text);
$script_text = preg_replace('/--A--SIPexten--B--/i',"$SIPexten",$script_text);
$script_text = preg_replace('/--A--session_id--B--/i',"$session_id",$script_text);
$script_text = preg_replace('/--A--phone--B--/i',"$phone",$script_text);
$script_text = preg_replace('/--A--parked_by--B--/i',"$parked_by",$script_text);
$script_text = preg_replace('/--A--dispo--B--/i',"$dispo",$script_text);
$script_text = preg_replace('/--A--dialed_number--B--/i',"$dialed_number",$script_text);
$script_text = preg_replace('/--A--dialed_label--B--/i',"$dialed_label",$script_text);
$script_text = preg_replace('/--A--source_id--B--/i',"$source_id",$script_text);
$script_text = preg_replace('/--A--rank--B--/i',"$rank",$script_text);
$script_text = preg_replace('/--A--owner--B--/i',"$owner",$script_text);
$script_text = preg_replace('/--A--camp_script--B--/i',"$camp_script",$script_text);
$script_text = preg_replace('/--A--in_script--B--/i',"$in_script",$script_text);
$script_text = preg_replace('/--A--script_width--B--/i',"$script_width",$script_text);
$script_text = preg_replace('/--A--script_height--B--/i',"$script_height",$script_text);
$script_text = preg_replace('/--A--fullname--B--/i',"$fullname",$script_text);
$script_text = preg_replace('/--A--recording_filename--B--/i',"$recording_filename",$script_text);
$script_text = preg_replace('/--A--recording_id--B--/i',"$recording_id",$script_text);
$script_text = preg_replace('/--A--user_custom_one--B--/i',"$user_custom_one",$script_text);
$script_text = preg_replace('/--A--user_custom_two--B--/i',"$user_custom_two",$script_text);
$script_text = preg_replace('/--A--user_custom_three--B--/i',"$user_custom_three",$script_text);
$script_text = preg_replace('/--A--user_custom_four--B--/i',"$user_custom_four",$script_text);
$script_text = preg_replace('/--A--user_custom_five--B--/i',"$user_custom_five",$script_text);
$script_text = preg_replace('/--A--preset_number_a--B--/i',"$preset_number_a",$script_text);
$script_text = preg_replace('/--A--preset_number_b--B--/i',"$preset_number_b",$script_text);
$script_text = preg_replace('/--A--preset_number_c--B--/i',"$preset_number_c",$script_text);
$script_text = preg_replace('/--A--preset_number_d--B--/i',"$preset_number_d",$script_text);
$script_text = preg_replace('/--A--preset_number_e--B--/i',"$preset_number_e",$script_text);
$script_text = preg_replace('/--A--preset_number_f--B--/i',"$preset_number_f",$script_text);
$script_text = preg_replace('/--A--preset_dtmf_a--B--/i',"$preset_dtmf_a",$script_text);
$script_text = preg_replace('/--A--preset_dtmf_b--B--/i',"$preset_dtmf_b",$script_text);
$script_text = preg_replace('/--A--did_id--B--/i',"$did_id",$script_text);
$script_text = preg_replace('/--A--did_extension--B--/i',"$did_extension",$script_text);
$script_text = preg_replace('/--A--did_pattern--B--/i',"$did_pattern",$script_text);
$script_text = preg_replace('/--A--did_description--B--/i',"$did_description",$script_text);
$script_text = preg_replace('/--A--closecallid--B--/i',"$closecallid",$script_text);
$script_text = preg_replace('/--A--xfercallid--B--/i',"$xfercallid",$script_text);
$script_text = preg_replace('/--A--agent_log_id--B--/i',"$agent_log_id",$script_text);
$script_text = preg_replace('/--A--entry_list_id--B--/i',"$entry_list_id",$script_text);
$script_text = preg_replace('/--A--call_id--B--/i',"$call_id",$script_text);
$script_text = preg_replace('/--A--web_vars--B--/i',"$web_vars",$script_text);
if ($CF_uses_custom_fields=='Y')
{
@@ -497,24 +498,24 @@ if ($CF_uses_custom_fields=='Y')
$field_name_tag = "--A--" . $field_name_id . "--B--";
if (isset($_GET["$field_name_id"])) {$form_field_value=$_GET["$field_name_id"];}
elseif (isset($_POST["$field_name_id"])) {$form_field_value=$_POST["$field_name_id"];}
$script_text = eregi_replace("$field_name_tag","$form_field_value",$script_text);
$script_text = preg_replace("/$field_name_tag/i","$form_field_value",$script_text);
if ($DB) {echo "$d|$field_name_id|$field_name_tag|$form_field_value|<br>\n";}
$d++;
}
}
$script_text = eregi_replace("\n","<BR>",$script_text);
$script_text = preg_replace("/\n/i","<BR>",$script_text);
$script_text = stripslashes($script_text);
echo "<!-- IFRAME$IFRAME -->\n";
echo "<!-- $script_id -->\n";
echo "<TABLE WIDTH=$script_width><TR><TD>\n";
if ( ( ($IFRAME < 1) and ($ScrollDIV > 0) ) or (eregi("IGNORENOSCROLL",$script_text)) )
if ( ( ($IFRAME < 1) and ($ScrollDIV > 0) ) or (preg_match("/IGNORENOSCROLL/i",$script_text)) )
{echo "<div class=\"scroll_script\" id=\"NewScriptContents\">";}
echo "<center><B>$script_name</B><BR></center>\n";
echo "$script_text\n";
if ( ( ($IFRAME < 1) and ($ScrollDIV > 0) ) or (eregi("IGNORENOSCROLL",$script_text)) )
if ( ( ($IFRAME < 1) and ($ScrollDIV > 0) ) or (preg_match("/IGNORENOSCROLL/i",$script_text)) )
{echo "</div>";}
echo "</TD></TR></TABLE>\n";
+13 -12
View File
@@ -1,7 +1,7 @@
<?php
# vdc_script_dispo_example.php
#
# Copyright (C) 2011 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed to be used in the SCRIPT tab in an IFRAME and will not submit unless a specific field is filled in
#
@@ -14,10 +14,11 @@
# CHANGELOG:
# 110208-1239 - First build of script based upon vdc_script_notes.php
# 110221-1252 - Added missing variables, accounted for call notes on manual dial calls
# 130328-0019 - Converted ereg to preg functions
#
$version = '2.4-2';
$build = '110221-1252';
$version = '2.6-3';
$build = '130328-0019';
require("dbconnect.php");
@@ -261,16 +262,16 @@ if ($qm_conf_ct > 0)
if ($non_latin < 1)
{
$user=ereg_replace("[^-_0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^-_0-9a-zA-Z]","",$pass);
$length_in_sec = ereg_replace("[^0-9]","",$length_in_sec);
$phone_code = ereg_replace("[^0-9]","",$phone_code);
$phone_number = ereg_replace("[^0-9]","",$phone_number);
$user=preg_replace("/[^-_0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^-_0-9a-zA-Z]/","",$pass);
$length_in_sec = preg_replace("/[^0-9]/","",$length_in_sec);
$phone_code = preg_replace("/[^0-9]/","",$phone_code);
$phone_number = preg_replace("/[^0-9]/","",$phone_number);
}
else
{
$user = ereg_replace("'|\"|\\\\|;","",$user);
$pass = ereg_replace("'|\"|\\\\|;","",$pass);
$user = preg_replace("/\'|\"|\\\\|;/","",$user);
$pass = preg_replace("/\'|\"|\\\\|;/","",$pass);
}
if ($DB > 0)
@@ -704,7 +705,7 @@ $DS=0;
while ($statuses_to_print > $o)
{
$rowx=mysql_fetch_row($rslt);
if ( (strlen($dispo) == strlen($rowx[0])) and (eregi($dispo,$rowx[0])) )
if ( (strlen($dispo) == strlen($rowx[0])) and (preg_match("/$dispo/i",$rowx[0])) )
{$statuses_list .= "<option SELECTED value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n"; $DS++;}
else
{$statuses_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";}
@@ -720,7 +721,7 @@ $CBhold_set=0;
while ($CAMPstatuses_to_print > $o)
{
$rowx=mysql_fetch_row($rslt);
if ( (strlen($dispo) == strlen($rowx[0])) and (eregi($dispo,$rowx[0])) )
if ( (strlen($dispo) == strlen($rowx[0])) and (preg_match("/$dispo/i",$rowx[0])) )
{$statuses_list .= "<option SELECTED value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n"; $DS++;}
else
{$statuses_list .= "<option value=\"$rowx[0]\">$rowx[0] - $rowx[1]</option>\n";}
+11 -10
View File
@@ -1,7 +1,7 @@
<?php
# vdc_script_notes.php
#
# Copyright (C) 2010 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed open in the SCRIPT tab in the agent interface through
# an IFRAME. It will create a new record for every SUBMIT
@@ -12,10 +12,11 @@
# CHANGELOG:
# 100215-0744 - First build of script
# 100622-2230 - Added field labels
# 130328-0020 - Converted ereg to preg functions
#
$version = '2.4-2';
$build = '100622-2230';
$version = '2.6-3';
$build = '130328-0020';
require("dbconnect.php");
@@ -229,16 +230,16 @@ if ($qm_conf_ct > 0)
if ($non_latin < 1)
{
$user=ereg_replace("[^-_0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^-_0-9a-zA-Z]","",$pass);
$length_in_sec = ereg_replace("[^0-9]","",$length_in_sec);
$phone_code = ereg_replace("[^0-9]","",$phone_code);
$phone_number = ereg_replace("[^0-9]","",$phone_number);
$user=preg_replace("/[^-_0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^-_0-9a-zA-Z]/","",$pass);
$length_in_sec = preg_replace("/[^0-9]/","",$length_in_sec);
$phone_code = preg_replace("/[^0-9]/","",$phone_code);
$phone_number = preg_replace("/[^0-9]/","",$phone_number);
}
else
{
$user = ereg_replace("'|\"|\\\\|;","",$user);
$pass = ereg_replace("'|\"|\\\\|;","",$pass);
$user = preg_replace("/\'|\"|\\\\|;/","",$user);
$pass = preg_replace("/\'|\"|\\\\|;/","",$pass);
}
if ($DB > 0)
+42 -41
View File
@@ -394,10 +394,11 @@
# 121206-0634 - Added inbound lead search feature
# 121222-2315 - Added inbound email features
# 130220-1214 - Fixed issue with 3-way call dial timeout
# 130328-0006 - Converted ereg to preg functions
#
$version = '2.6-362c';
$build = '130220-1214';
$version = '2.6-363c';
$build = '130328-0006';
$mel=1; # Mysql Error Log enabled = 1
$mysql_log_count=79;
$one_mysql_log=0;
@@ -438,7 +439,7 @@ if (!isset($phone_pass))
if (isset($VD_campaign))
{
$VD_campaign = strtoupper($VD_campaign);
$VD_campaign = eregi_replace(" ",'',$VD_campaign);
$VD_campaign = preg_replace("/\s/i",'',$VD_campaign);
}
if (!isset($flag_channels))
{
@@ -447,12 +448,12 @@ if (!isset($flag_channels))
}
### security strip all non-alphanumeric characters out of the variables ###
$DB=ereg_replace("[^0-9a-z]","",$DB);
$phone_login=ereg_replace("[^\,0-9a-zA-Z]","",$phone_login);
$phone_pass=ereg_replace("[^0-9a-zA-Z]","",$phone_pass);
$VD_login=ereg_replace("[^-_0-9a-zA-Z]","",$VD_login);
$VD_pass=ereg_replace("[^-_0-9a-zA-Z]","",$VD_pass);
$VD_campaign = ereg_replace("[^-_0-9a-zA-Z]","",$VD_campaign);
$DB=preg_replace("/[^0-9a-z]/","",$DB);
$phone_login=preg_replace("/[^\,0-9a-zA-Z]/","",$phone_login);
$phone_pass=preg_replace("/[^0-9a-zA-Z]/","",$phone_pass);
$VD_login=preg_replace("/[^-_0-9a-zA-Z]/","",$VD_login);
$VD_pass=preg_replace("/[^-_0-9a-zA-Z]/","",$VD_pass);
$VD_campaign = preg_replace("/[^-_0-9a-zA-Z]/","",$VD_campaign);
$forever_stop=0;
@@ -627,12 +628,12 @@ $browser = getenv("HTTP_USER_AGENT");
$script_name = getenv("SCRIPT_NAME");
$server_name = getenv("SERVER_NAME");
$server_port = getenv("SERVER_PORT");
if (eregi("443",$server_port)) {$HTTPprotocol = 'https://';}
if (preg_match("/443/i",$server_port)) {$HTTPprotocol = 'https://';}
else {$HTTPprotocol = 'http://';}
if (($server_port == '80') or ($server_port == '443') ) {$server_port='';}
else {$server_port = "$CL$server_port";}
$agcPAGE = "$HTTPprotocol$server_name$server_port$script_name";
$agcDIR = eregi_replace('vicidial.php','',$agcPAGE);
$agcDIR = preg_replace('/vicidial\.php/i','',$agcPAGE);
if (strlen($static_agent_url) > 5)
{$agcPAGE = $static_agent_url;}
@@ -670,10 +671,10 @@ if ($campaign_login_list > 0)
$rslt=mysql_query($stmt, $link);
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'01003',$VD_login,$server_ip,$session_name,$one_mysql_log);}
$row=mysql_fetch_row($rslt);
if ( (!eregi("ALL-CAMPAIGNS",$row[0])) )
if ( (!preg_match("/ALL-CAMPAIGNS/i",$row[0])) )
{
$LOGallowed_campaignsSQL = eregi_replace(' -','',$row[0]);
$LOGallowed_campaignsSQL = eregi_replace(' ',"','",$LOGallowed_campaignsSQL);
$LOGallowed_campaignsSQL = preg_replace('/\s-/i','',$row[0]);
$LOGallowed_campaignsSQL = preg_replace('/\s/i',"','",$LOGallowed_campaignsSQL);
$LOGallowed_campaignsSQL = "and campaign_id IN('$LOGallowed_campaignsSQL')";
}
}
@@ -703,7 +704,7 @@ if ($campaign_login_list > 0)
### Add a record to the vicidial_admin_log
$SQL_log = "$stmt|";
$SQL_log = ereg_replace(';','',$SQL_log);
$SQL_log = preg_replace('/;/','',$SQL_log);
$SQL_log = addslashes($SQL_log);
$stmt="INSERT INTO vicidial_admin_log set event_date='$NOW_TIME', user='$MGR_login', ip_address='$ip', event_section='AGENT', event_type='OVERRIDE', record_id='$VD_login', event_code='MANAGER OVERRIDE OF AGENT SHIFT ENFORCEMENT', event_sql=\"$SQL_log\", event_notes='user: $VD_login';";
if ($DB) {echo "|$stmt|\n";}
@@ -729,17 +730,17 @@ if ($campaign_login_list > 0)
{$campname = '';}
if ($VD_campaign)
{
if ( (eregi("$VD_campaign",$rowx[0])) and (strlen($VD_campaign) == strlen($rowx[0])) )
if ( (preg_match("/$VD_campaign/i",$rowx[0])) and (strlen($VD_campaign) == strlen($rowx[0])) )
{$camp_form_code .= "<option value=\"$rowx[0]\" selected=\"selected\">$rowx[0]$campname</option>\n";}
else
{
if (!ereg('login_allowable_campaigns',$camp_form_code))
if (!preg_match('/login_allowable_campaigns/',$camp_form_code))
{$camp_form_code .= "<option value=\"$rowx[0]\">$rowx[0]$campname</option>\n";}
}
}
else
{
if (!ereg('login_allowable_campaigns',$camp_form_code))
if (!preg_match('/login_allowable_campaigns/',$camp_form_code))
{$camp_form_code .= "<option value=\"$rowx[0]\">$rowx[0]$campname</option>\n";}
}
$o++;
@@ -765,7 +766,7 @@ if ($LogiNAJAX > 0)
function browser_dimensions()
{
<?php
if (ereg('MSIE',$browser))
if (preg_match('/MSIE/',$browser))
{
echo " if (document.documentElement && document.documentElement.clientHeight)\n";
echo " {BrowseWidth = document.documentElement.clientWidth;}\n";
@@ -1090,12 +1091,12 @@ else
$row=mysql_fetch_row($rslt);
$forced_timeclock_login = $row[0];
$shift_enforcement = $row[1];
$LOGgroup_shiftsSQL = eregi_replace(' ','',$row[2]);
$LOGgroup_shiftsSQL = eregi_replace(' ',"','",$LOGgroup_shiftsSQL);
$LOGgroup_shiftsSQL = preg_replace('/\s\s/i','',$row[2]);
$LOGgroup_shiftsSQL = preg_replace('/\s/i',"','",$LOGgroup_shiftsSQL);
$LOGgroup_shiftsSQL = "shift_id IN('$LOGgroup_shiftsSQL')";
$agent_status_viewable_groups = $row[3];
$agent_status_viewable_groupsSQL = eregi_replace(' ','',$agent_status_viewable_groups);
$agent_status_viewable_groupsSQL = eregi_replace(' ',"','",$agent_status_viewable_groupsSQL);
$agent_status_viewable_groupsSQL = preg_replace('/\s\s/i','',$agent_status_viewable_groups);
$agent_status_viewable_groupsSQL = preg_replace('/\s/i',"','",$agent_status_viewable_groupsSQL);
$agent_status_viewable_groupsSQL = "user_group IN('$agent_status_viewable_groupsSQL')";
$agent_status_view = 0;
if (strlen($agent_status_viewable_groups) > 2)
@@ -1129,7 +1130,7 @@ else
{$webphone_dialpad = $webphone_dialpad_override;}
### BEGIN - CHECK TO SEE IF AGENT IS LOGGED IN TO TIMECLOCK, IF NOT, OUTPUT ERROR
if ( (ereg('Y',$forced_timeclock_login)) or ( (ereg('ADMIN_EXEMPT',$forced_timeclock_login)) and ($VU_user_level < 8) ) )
if ( (preg_match('/Y/',$forced_timeclock_login)) or ( (preg_match('/ADMIN_EXEMPT/',$forced_timeclock_login)) and ($VU_user_level < 8) ) )
{
$last_agent_event='';
$HHMM = date("Hi");
@@ -1154,7 +1155,7 @@ else
$last_agent_event = $rowx[0];
}
if ($DB>0) {echo "|$stmt|$events_to_parse|$last_agent_event|";}
if ( (strlen($last_agent_event)<2) or (ereg('LOGOUT',$last_agent_event)) )
if ( (strlen($last_agent_event)<2) or (preg_match('/LOGOUT/',$last_agent_event)) )
{
$VDloginDISPLAY=1;
$VDdisplayMESSAGE = "YOU MUST LOG IN TO THE TIMECLOCK FIRST<br />";
@@ -1163,7 +1164,7 @@ else
### END - CHECK TO SEE IF AGENT IS LOGGED IN TO TIMECLOCK, IF NOT, OUTPUT ERROR
### BEGIN - CHECK TO SEE IF SHIFT ENFORCEMENT IS ENABLED AND AGENT IS OUTSIDE OF THEIR SHIFTS, IF SO, OUTPUT ERROR
if ( ( (ereg("START|ALL",$shift_enforcement)) and (!ereg("OFF",$VU_agent_shift_enforcement_override)) ) or (ereg("START|ALL",$VU_agent_shift_enforcement_override)) )
if ( ( (preg_match("/START|ALL/",$shift_enforcement)) and (!preg_match("/OFF/",$VU_agent_shift_enforcement_override)) ) or (preg_match("/START|ALL/",$VU_agent_shift_enforcement_override)) )
{
$shift_ok=0;
if ( (strlen($LOGgroup_shiftsSQL) < 3) and ($VU_shift_override_flag < 1) )
@@ -1190,7 +1191,7 @@ else
$shift_length = $rowx[2];
$shift_weekdays = $rowx[3];
if (eregi("$wday",$shift_weekdays))
if (preg_match("/$wday/i",$shift_weekdays))
{
$HHshift_length = substr($shift_length,0,2);
$MMshift_length = substr($shift_length,3,2);
@@ -1251,7 +1252,7 @@ else
}
$user_abb = "$VD_login$VD_login$VD_login$VD_login";
while ( (strlen($user_abb) > 4) and ($forever_stop < 200) )
{$user_abb = eregi_replace("^.","",$user_abb); $forever_stop++;}
{$user_abb = preg_replace("/^\./i","",$user_abb); $forever_stop++;}
$stmt="SELECT allowed_campaigns from vicidial_user_groups where user_group='$VU_user_group';";
$rslt=mysql_query($stmt, $link);
@@ -1259,7 +1260,7 @@ else
$row=mysql_fetch_row($rslt);
$LOGallowed_campaigns =$row[0];
if ( (!eregi(" $VD_campaign ",$LOGallowed_campaigns)) and (!eregi("ALL-CAMPAIGNS",$LOGallowed_campaigns)) )
if ( (!preg_match("/\s$VD_campaign\s/i",$LOGallowed_campaigns)) and (!preg_match("/ALL-CAMPAIGNS/i",$LOGallowed_campaigns)) )
{
echo "<title>Agent web client: Campaign Login</title>\n";
echo "</head>\n";
@@ -1711,7 +1712,7 @@ else
$default_web_vars = $row[0];
}
if ( (!ereg('DISABLED',$VU_vicidial_recording_override)) and ($VU_vicidial_recording > 0) )
if ( (!preg_match('/DISABLED/',$VU_vicidial_recording_override)) and ($VU_vicidial_recording > 0) )
{
$campaign_recording = $VU_vicidial_recording_override;
echo "<!-- USER RECORDING OVERRIDE: |$VU_vicidial_recording_override|$campaign_recording| -->\n";
@@ -1742,7 +1743,7 @@ else
$closer_campaigns = preg_replace("/ /","','",$closer_campaigns);
$closer_campaigns = "'$closer_campaigns'";
if ( (ereg('Y',$agent_pause_codes_active)) or (ereg('FORCE',$agent_pause_codes_active)) )
if ( (preg_match('/Y/',$agent_pause_codes_active)) or (preg_match('/FORCE/',$agent_pause_codes_active)) )
{
##### grab the pause codes for this campaign
$stmt="SELECT pause_code,pause_code_name FROM vicidial_pause_codes WHERE campaign_id='$VD_campaign' order by pause_code limit 100;";
@@ -1903,7 +1904,7 @@ else
$VARxfergroupsnames = substr("$VARxfergroupsnames", 0, -1);
}
if (ereg('Y',$agent_allow_group_alias))
if (preg_match('/Y/',$agent_allow_group_alias))
{
##### grab the active group aliases
$stmt="SELECT group_alias_id,group_alias_name,caller_id_number FROM groups_alias WHERE active='Y' order by group_alias_id limit 1000;";
@@ -2026,7 +2027,7 @@ else
}
$pa=0;
if ( (eregi(',',$phone_login)) and (strlen($phone_login) > 2) )
if ( (preg_match('/,/i',$phone_login)) and (strlen($phone_login) > 2) )
{
$phoneSQL = "(";
$phones_auto = explode(',',$phone_login);
@@ -2345,7 +2346,7 @@ else
$SIP_user = "$protocol/$extension";
$SIP_user_DiaL = "$protocol/$extension";
$qm_extension = "$extension";
if ( (ereg('8300',$dialplan_number)) and (strlen($dialplan_number)<5) and ($protocol == 'Local') )
if ( (preg_match('/8300/',$dialplan_number)) and (strlen($dialplan_number)<5) and ($protocol == 'Local') )
{
$SIP_user = "$protocol/$extension$VD_login";
$qm_extension = "$extension$VD_login";
@@ -2401,7 +2402,7 @@ else
}
$session_ext = eregi_replace("[^a-z0-9]", "", $extension);
$session_ext = preg_replace("/[^a-z0-9]/i", "", $extension);
if (strlen($session_ext) > 10) {$session_ext = substr($session_ext, 0, 10);}
$session_rand = (rand(1,9999999) + 10000000);
$session_name = "$StarTtimE$US$session_ext$session_rand";
@@ -2421,7 +2422,7 @@ else
$rslt=mysql_query($stmt, $link);
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'01030',$VD_login,$server_ip,$session_name,$one_mysql_log);}
if ( ( ($campaign_allow_inbound == 'Y') and ($dial_method != 'MANUAL') ) || ($campaign_leads_to_call > 0) || (ereg('Y',$no_hopper_leads_logins)) )
if ( ( ($campaign_allow_inbound == 'Y') and ($dial_method != 'MANUAL') ) || ($campaign_leads_to_call > 0) || (preg_match('/Y/',$no_hopper_leads_logins)) )
{
##### check to see if the user has a conf extension already, this happens if they previously exited uncleanly
$stmt="SELECT conf_exten FROM vicidial_conferences where extension='$SIP_user' and server_ip = '$server_ip' LIMIT 1;";
@@ -2530,7 +2531,7 @@ else
##### END QUEUEMETRICS LOGGING LOOKUP #####
###########################################
if ( ($enable_sipsak_messages > 0) and ($allow_sipsak_messages > 0) and (eregi("SIP",$protocol)) )
if ( ($enable_sipsak_messages > 0) and ($allow_sipsak_messages > 0) and (preg_match("/SIP/i",$protocol)) )
{
$SIPSAK_prefix = 'LIN-';
echo "<!-- sending login sipsak message: $SIPSAK_prefix$VD_campaign -->\n";
@@ -2848,7 +2849,7 @@ else
exit;
}
if (ereg('MSIE',$browser))
if (preg_match('/MSIE/',$browser))
{
$useIE=1;
echo "<!-- client web browser used: MSIE |$browser|$useIE| -->\n";
@@ -14478,7 +14479,7 @@ $zi=2;
{
echo "$label_phone_number: </td><td align=\"left\"><font class=\"body_text\">";
if ( (ereg('Y',$disable_alter_custphone)) or (ereg('HIDE',$disable_alter_custphone)) )
if ( (preg_match('/Y/',$disable_alter_custphone)) or (preg_match('/HIDE/',$disable_alter_custphone)) )
{
echo "<font class=\"body_text\"><span id=\"phone_numberDISP\"> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </span></font>";
echo "<input type=\"hidden\" name=\"phone_number\" id=\"phone_number\" value=\"\" />";
@@ -14595,7 +14596,7 @@ $zi=2;
<tr><td colspan="3"><span id="outboundcallsspan"></span></td></tr>
<tr><td colspan="3"><font class="body_small"><span id="AgentAlertSpan">
<?php
if ( (ereg('ON',$VU_alert_enabled)) and ($AgentAlert_allowed > 0) )
if ( (preg_match('/ON/',$VU_alert_enabled)) and ($AgentAlert_allowed > 0) )
{echo "<a href=\"#\" onclick=\"alert_control('OFF');return false;\">Alert is ON</a>";}
else
{echo "<a href=\"#\" onclick=\"alert_control('ON');return false;\">Alert is OFF</a>";}
@@ -15081,7 +15082,7 @@ class="cust_form_text" value=""></TEXTAREA><input type="hidden" class="cust_form
<table border="1" bgcolor="#CCFFCC" width="<?php echo $CAwidth ?>px" height="<?php echo $WRheight ?>px"><tr><td align="center" valign="top"> NEW MANUAL DIAL LEAD FOR <?php echo "$VD_login in campaign $VD_campaign" ?>:<br /><br />Enter information below for the new lead you wish to call.
<br />
<?php
if (!eregi("X",$manual_dial_prefix))
if (!preg_match("/X/i",$manual_dial_prefix))
{
echo "Note: a dial prefix of $manual_dial_prefix will be added to the beginning of this number<br />\n";
}
+29 -29
View File
@@ -1,7 +1,7 @@
<?php
# voicemail_check.php version 2.2.0
# voicemail_check.php version 2.6
#
# Copyright (C) 2009 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
# Copyright (C) 2013 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
#
# This script is designed purely to check whether the voicemail box on the server defined has new and old messages
# This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table
@@ -23,6 +23,7 @@
# 60421-1147 - check GET/POST vars lines with isset to not trigger PHP NOTICES
# 60619-1204 - Added variable filters to close security holes for login form
# 90508-0727 - Changed to PHP long tags
# 130328-0025 - Converted ereg to preg functions
#
require("dbconnect.php");
@@ -41,33 +42,32 @@ if (isset($_GET["format"])) {$format=$_GET["format"];}
if (isset($_GET["vmail_box"])) {$vmail_box=$_GET["vmail_box"];}
elseif (isset($_POST["vmail_box"])) {$vmail_box=$_POST["vmail_box"];}
$user=ereg_replace("[^0-9a-zA-Z]","",$user);
$pass=ereg_replace("[^0-9a-zA-Z]","",$pass);
$user=preg_replace("/[^0-9a-zA-Z]/","",$user);
$pass=preg_replace("/[^0-9a-zA-Z]/","",$pass);
# default optional vars if not set
if (!isset($format)) {$format="text";}
$version = '0.0.5';
$build = '60619-1204';
$version = '0.0.7';
$build = '130328-0025';
$StarTtime = date("U");
$NOW_DATE = date("Y-m-d");
$NOW_TIME = date("Y-m-d H:i:s");
if (!isset($query_date)) {$query_date = $NOW_DATE;}
$stmt="SELECT count(*) from vicidial_users where user='$user' and pass='$pass' and user_level > 0;";
if ($DB) {echo "|$stmt|\n";}
$rslt=mysql_query($stmt, $link);
$row=mysql_fetch_row($rslt);
$auth=$row[0];
$stmt="SELECT count(*) from vicidial_users where user='$user' and pass='$pass' and user_level > 0;";
if ($DB) {echo "|$stmt|\n";}
$rslt=mysql_query($stmt, $link);
$row=mysql_fetch_row($rslt);
$auth=$row[0];
if( (strlen($user)<2) or (strlen($pass)<2) or ($auth==0))
if( (strlen($user)<2) or (strlen($pass)<2) or ($auth==0))
{
echo "Invalid Username/Password: |$user|$pass|\n";
exit;
echo "Invalid Username/Password: |$user|$pass|\n";
exit;
}
else
else
{
if( (strlen($server_ip)<6) or (!isset($server_ip)) or ( (strlen($session_name)<12) or (!isset($session_name)) ) )
{
echo "Invalid server_ip: |$server_ip| or Invalid session_name: |$session_name|\n";
@@ -93,25 +93,25 @@ if (!isset($query_date)) {$query_date = $NOW_DATE;}
}
if ($format=='debug')
{
echo "<html>\n";
echo "<head>\n";
echo "<!-- VERSION: $version BUILD: $build VMBOX: $vmail_box server_ip: $server_ip-->\n";
echo "<title>Voicemail Check";
echo "</title>\n";
echo "</head>\n";
echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>\n";
}
{
echo "<html>\n";
echo "<head>\n";
echo "<!-- VERSION: $version BUILD: $build VMBOX: $vmail_box server_ip: $server_ip-->\n";
echo "<title>Voicemail Check";
echo "</title>\n";
echo "</head>\n";
echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>\n";
}
$MT[0]='';
$row=''; $rowx='';
if (strlen($vmail_box)<1)
$MT[0]='';
$row=''; $rowx='';
if (strlen($vmail_box)<1)
{
$channel_live=0;
echo "voicemail box $vmail_box is not valid\n";
exit;
}
else
else
{
$stmt="SELECT messages,old_messages FROM phones where server_ip='$server_ip' and voicemail_id='$vmail_box' limit 1;";
if ($format=='debug') {echo "\n<!-- $stmt -->";}
+4 -2
View File
@@ -2548,7 +2548,6 @@ if ($non_latin < 1)
$amd_callmenu = ereg_replace("[^-_0-9a-zA-Z]","",$amd_callmenu);
### ALPHA-NUMERIC and underscore and dash and slash and dot
$menu_prompt = ereg_replace("[^-\/\|\._0-9a-zA-Z]","",$menu_prompt);
$menu_timeout_prompt = ereg_replace("[^-\/\|\._0-9a-zA-Z]","",$menu_timeout_prompt);
$menu_invalid_prompt = ereg_replace("[^-\/\|\._0-9a-zA-Z]","",$menu_invalid_prompt);
$after_hours_message_filename = ereg_replace("[^-\/\|\._0-9a-zA-Z]","",$after_hours_message_filename);
@@ -2590,6 +2589,9 @@ if ($non_latin < 1)
$safe_harbor_audio_field = ereg_replace("[^-\/\|\._0-9a-zA-Z]","",$safe_harbor_audio_field);
$voicemail_greeting = ereg_replace("[^-\/\|\._0-9a-zA-Z]","",$voicemail_greeting);
### ALPHA-NUMERIC and underscore and dash and slash and dot and comma
$menu_prompt = ereg_replace("[^-\/\|\,\._0-9a-zA-Z]","",$menu_prompt);
### ALPHA-NUMERIC and underscore and dash and comma
$logins_list = ereg_replace("[^-\,\_0-9a-zA-Z]","",$logins_list);
$forced_timeclock_login = ereg_replace("[^-\,\_0-9a-zA-Z]","",$forced_timeclock_login);
@@ -5559,7 +5561,7 @@ if ($ADD==99999)
<BR>
<A NAME="vicidial_campaigns-scheduled_callbacks_count">
<BR>
<B>Scheduled Callbacks Count -</B> This option allows you to set whether only LIVE callbacks, user-only scheduled callbacks that have hit their trigger date and time, or ALL_ACTIVE callbacks, user-only callbacks that are active in the system as well as LIVE callbacks, should be3 counted int he agent callback alert section on the agent screen. Default is ALL_ACTIVE.
<B>Scheduled Callbacks Count -</B> These options allows you to limit the viewable callbacks in the agent callback alert section on the agent screen, to only LIVE callbacks. LIVE callbacks are user-only scheduled callbacks that have hit their trigger date and time. ACTIVE call backs are user-only callbacks that are active in the system but have not yet triggered. You can view both ACTIVE and LIVE callbacks by selecting ALL_ACTIVE. Default is ALL_ACTIVE.
<BR>
<A NAME="vicidial_campaigns-callback_days_limit">