ViciDial/agc_2-X
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added more variable filtering to several PHP scripts.

Browse Source 
git-svn-id: svn://192.168.202.10@3499 3d104415-ff17-0410-8863-d5cf3c621b8a
This commit is contained in:
mattf
2021-08-23 14:20:56 +00:00
parent 3f46afc75f
commit 894a0ae124
6 changed files with 64 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
www/agc/manager_send.php
+6 -5
View File
@@ -147,10 +147,11 @@
# 201117-1751 - Changes for better compatibility with non-latin data input
# 210615-1016 - Default security fixes, CVE-2021-28854
# 210616-2051 - Added optional CORS support, see options.php for details
# 210823-0916 - Fix for security issue
#
$version = '2.14-94';
$build = '210616-2051';
$version = '2.14-95';
$build = '210823-0916';
$php_script = 'manager_send.php';
$mel=1; # Mysql Error Log enabled = 1
$mysql_log_count=143;
@@ -555,9 +556,9 @@ if ($ACTION=="OriginateVDRelogin")
$CIDdate = date("ymdHis");
$DS='-';
$SIPSAK_prefix = 'LIN-';
$campaign = preg_replace("/\'|\"|\\\\|;/","",$campaign);
$extension = preg_replace("/\'|\"|\\\\|;/","",$extension);
$phone_ip = preg_replace("/\'|\"|\\\\|;/","",$phone_ip);
$campaign = preg_replace('/[^-\._0-9\p{L}]/u',"",$campaign);
$extension = preg_replace('/[^-\._0-9\p{L}]/u',"",$extension);
$phone_ip = preg_replace('/[^-\._0-9\p{L}]/u',"",$phone_ip);
print "<!-- sending login sipsak message: $SIPSAK_prefix$campaign -->\n";
passthru("/usr/local/bin/sipsak -M -O desktop -B \"$SIPSAK_prefix$campaign\" -r 5060 -s sip:$extension@$phone_ip > /dev/null");