ViciDial/agc_2-X
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added PHP input form variable filters

Browse Source 
git-svn-id: svn://192.168.202.10@3566 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2022-02-18 06:09:51 +00:00
parent ca414e4e48
commit 55c9bc35dc
158 changed files with 297 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
www/vicidial/admin.php
+4 -2
View File
@@ -2704,6 +2704,7 @@ if (isset($_GET["pause_max_url"])) {$pause_max_url=$_GET["pause_max_url"];}
if (isset($_GET["agent_hide_hangup"])) {$agent_hide_hangup=$_GET["agent_hide_hangup"];}
elseif (isset($_POST["agent_hide_hangup"])) {$agent_hide_hangup=$_POST["agent_hide_hangup"];}
$DB=preg_replace("/[^0-9a-zA-Z]/","",$DB);
if (isset($script_id)) {$script_id= mb_strtoupper($script_id,'utf-8');}
if (isset($lead_filter_id)) {$lead_filter_id = mb_strtoupper($lead_filter_id,'utf-8');}
@@ -5819,12 +5820,13 @@ if ($SSscript_remove_js > 0)
# 220215-1011 - Fix for XSS multi-script security issue
# 220215-1431 - Additional XSS script text variable filtering
# 220217-1727 - Added agent_hide_hangup system and campaign settings
# 220217-2022 - Added input variable filtering
#
# make sure you have added a user to the vicidial_users MySQL table with at least user_level 9 to access this page the first time
$admin_version = '2.14-846a';
$build = '220217-1727';
$admin_version = '2.14-847a';
$build = '220217-2022';
$STARTtime = date("U");
$SQLdate = date("Y-m-d H:i:s");