LICENSE: AGPLv2 # # This script is designed open in the SCRIPT tab in the agent interface through # an IFRAME. It will create a new record for every SUBMIT # # Example of a ViciDial agent SCRIPT using this script: # # # CHANGELOG: # 100215-0744 - First build of script # 100622-2230 - Added field labels # 130328-0020 - Converted ereg to preg functions # 130603-2203 - Added login lockout for 15 minutes after 10 failed logins, and other security fixes # 130802-1037 - Changed to PHP mysqli functions # 140810-2113 - Changed to use QXZ function for echoing text # 141216-2132 - Added language settings lookups and user/pass variable standardization # 170526-2345 - Added additional variable filtering # 170528-0901 - Added more variable filtering # 201117-2213 - Changes for better compatibility with non-latin data input # 210616-2034 - Added optional CORS support, see options.php for details # 210825-0901 - Fix for XSS security issue # 220219-0136 - Added allow_web_debug system setting # 260303-0712 - Code updates for PHP8 compatibility # $version = '2.14-14'; $build = '260303-0712'; $php_script = 'vdc_script_notes.php'; require_once("dbconnect_mysqli.php"); require_once("functions.php"); if (isset($_POST["lead_id"])) {$lead_id=$_POST["lead_id"];} elseif (isset($_GET["lead_id"])) {$lead_id=$_GET["lead_id"];} else {$lead_id=0;} if (isset($_POST["vendor_id"])) {$vendor_id=$_POST["vendor_id"];} elseif (isset($_GET["vendor_id"])) {$vendor_id=$_GET["vendor_id"];} else {$vendor_id="";} $vendor_lead_code = $vendor_id; if (isset($_POST["list_id"])) {$list_id=$_POST["list_id"];} elseif (isset($_GET["list_id"])) {$list_id=$_GET["list_id"];} else {$list_id=0;} if (isset($_POST["gmt_offset_now"])) {$gmt_offset_now=$_POST["gmt_offset_now"];} elseif (isset($_GET["gmt_offset_now"])) {$gmt_offset_now=$_GET["gmt_offset_now"];} else {$gmt_offset_now="";} if (isset($_POST["phone_code"])) {$phone_code=$_POST["phone_code"];} elseif (isset($_GET["phone_code"])) {$phone_code=$_GET["phone_code"];} else {$phone_code="";} if (isset($_POST["phone_number"])) {$phone_number=$_POST["phone_number"];} elseif (isset($_GET["phone_number"])) {$phone_number=$_GET["phone_number"];} else {$phone_number="";} if (isset($_POST["title"])) {$title=$_POST["title"];} elseif (isset($_GET["title"])) {$title=$_GET["title"];} else {$title="";} if (isset($_POST["first_name"])) {$first_name=$_POST["first_name"];} elseif (isset($_GET["first_name"])) {$first_name=$_GET["first_name"];} else {$first_name="";} if (isset($_POST["middle_initial"])) {$middle_initial=$_POST["middle_initial"];} elseif (isset($_GET["middle_initial"])) {$middle_initial=$_GET["middle_initial"];} else {$middle_initial="";} if (isset($_POST["last_name"])) {$last_name=$_POST["last_name"];} elseif (isset($_GET["last_name"])) {$last_name=$_GET["last_name"];} else {$last_name="";} if (isset($_POST["address1"])) {$address1=$_POST["address1"];} elseif (isset($_GET["address1"])) {$address1=$_GET["address1"];} else {$address1="";} if (isset($_POST["address2"])) {$address2=$_POST["address2"];} elseif (isset($_GET["address2"])) {$address2=$_GET["address2"];} else {$address2="";} if (isset($_POST["address3"])) {$address3=$_POST["address3"];} elseif (isset($_GET["address3"])) {$address3=$_GET["address3"];} else {$address3="";} if (isset($_POST["city"])) {$city=$_POST["city"];} elseif (isset($_GET["city"])) {$city=$_GET["city"];} else {$city="";} if (isset($_POST["state"])) {$state=$_POST["state"];} elseif (isset($_GET["state"])) {$state=$_GET["state"];} else {$state="";} if (isset($_POST["province"])) {$province=$_POST["province"];} elseif (isset($_GET["province"])) {$province=$_GET["province"];} else {$province="";} if (isset($_POST["postal_code"])) {$postal_code=$_POST["postal_code"];} elseif (isset($_GET["postal_code"])) {$postal_code=$_GET["postal_code"];} else {$postal_code="";} if (isset($_POST["country_code"])) {$country_code=$_POST["country_code"];} elseif (isset($_GET["country_code"])) {$country_code=$_GET["country_code"];} else {$country_code="";} if (isset($_POST["gender"])) {$gender=$_POST["gender"];} elseif (isset($_GET["gender"])) {$gender=$_GET["gender"];} else {$gender="";} if (isset($_POST["date_of_birth"])) {$date_of_birth=$_POST["date_of_birth"];} elseif (isset($_GET["date_of_birth"])) {$date_of_birth=$_GET["date_of_birth"];} else {$date_of_birth="";} if (isset($_POST["alt_phone"])) {$alt_phone=$_POST["alt_phone"];} elseif (isset($_GET["alt_phone"])) {$alt_phone=$_GET["alt_phone"];} else {$alt_phone="";} if (isset($_POST["email"])) {$email=$_POST["email"];} elseif (isset($_GET["email"])) {$email=$_GET["email"];} else {$email="";} if (isset($_POST["security_phrase"])) {$security_phrase=$_POST["security_phrase"];} elseif (isset($_GET["security_phrase"])) {$security_phrase=$_GET["security_phrase"];} else {$security_phrase="";} if (isset($_POST["comments"])) {$comments=$_POST["comments"];} elseif (isset($_GET["comments"])) {$comments=$_GET["comments"];} else {$comments="";} if (isset($_POST["user"])) {$user=$_POST["user"];} elseif (isset($_GET["user"])) {$user=$_GET["user"];} else {$user="";} if (isset($_POST["pass"])) {$pass=$_POST["pass"];} elseif (isset($_GET["pass"])) {$pass=$_GET["pass"];} else {$pass="";} if (isset($_POST["campaign"])) {$campaign=$_POST["campaign"];} elseif (isset($_GET["campaign"])) {$campaign=$_GET["campaign"];} else {$campaign="";} if (isset($_POST["phone_login"])) {$phone_login=$_POST["phone_login"];} elseif (isset($_GET["phone_login"])) {$phone_login=$_GET["phone_login"];} else {$phone_login="";} if (isset($_POST["original_phone_login"])) {$original_phone_login=$_POST["original_phone_login"];} elseif (isset($_GET["original_phone_login"])) {$original_phone_login=$_GET["original_phone_login"];} else {$original_phone_login="";} if (isset($_POST["phone_pass"])) {$phone_pass=$_POST["phone_pass"];} elseif (isset($_GET["phone_pass"])) {$phone_pass=$_GET["phone_pass"];} else {$phone_pass="";} if (isset($_POST["fronter"])) {$fronter=$_POST["fronter"];} elseif (isset($_GET["fronter"])) {$fronter=$_GET["fronter"];} else {$fronter="";} if (isset($_POST["closer"])) {$closer=$_POST["closer"];} elseif (isset($_GET["closer"])) {$closer=$_GET["closer"];} else {$closer="";} if (isset($_POST["group"])) {$group=$_POST["group"];} elseif (isset($_GET["group"])) {$group=$_GET["group"];} else {$group="";} if (isset($_POST["channel_group"])) {$channel_group=$_POST["channel_group"];} elseif (isset($_GET["channel_group"])) {$channel_group=$_GET["channel_group"];} else {$channel_group="";} if (isset($_POST["SQLdate"])) {$SQLdate=$_POST["SQLdate"];} elseif (isset($_GET["SQLdate"])) {$SQLdate=$_GET["SQLdate"];} else {$SQLdate="";} if (isset($_POST["epoch"])) {$epoch=$_POST["epoch"];} elseif (isset($_GET["epoch"])) {$epoch=$_GET["epoch"];} else {$epoch="";} if (isset($_POST["uniqueid"])) {$uniqueid=$_POST["uniqueid"];} elseif (isset($_GET["uniqueid"])) {$uniqueid=$_GET["uniqueid"];} else {$uniqueid="";} if (isset($_POST["customer_zap_channel"])) {$customer_zap_channel=$_POST["customer_zap_channel"];} elseif (isset($_GET["customer_zap_channel"])) {$customer_zap_channel=$_GET["customer_zap_channel"];} else {$customer_zap_channel="";} if (isset($_POST["customer_server_ip"])) {$customer_server_ip=$_POST["customer_server_ip"];} elseif (isset($_GET["customer_server_ip"])) {$customer_server_ip=$_GET["customer_server_ip"];} else {$customer_server_ip="";} if (isset($_POST["server_ip"])) {$server_ip=$_POST["server_ip"];} elseif (isset($_GET["server_ip"])) {$server_ip=$_GET["server_ip"];} if (isset($_POST["SIPexten"])) {$SIPexten=$_POST["SIPexten"];} elseif (isset($_GET["SIPexten"])) {$SIPexten=$_GET["SIPexten"];} else {$SIPexten="";} if (isset($_POST["session_id"])) {$session_id=$_POST["session_id"];} elseif (isset($_GET["session_id"])) {$session_id=$_GET["session_id"];} else {$session_id=0;} if (isset($_POST["phone"])) {$phone=$_POST["phone"];} elseif (isset($_GET["phone"])) {$phone=$_GET["phone"];} else {$phone="";} if (isset($_POST["parked_by"])) {$parked_by=$_POST["parked_by"];} elseif (isset($_GET["parked_by"])) {$parked_by=$_GET["parked_by"];} else {$parked_by="";} if (isset($_POST["dispo"])) {$dispo=$_POST["dispo"];} elseif (isset($_GET["dispo"])) {$dispo=$_GET["dispo"];} else {$dispo="";} if (isset($_POST["dialed_number"])) {$dialed_number=$_POST["dialed_number"];} elseif (isset($_GET["dialed_number"])) {$dialed_number=$_GET["dialed_number"];} else {$dialed_number="";} if (isset($_POST["dialed_label"])) {$dialed_label=$_POST["dialed_label"];} elseif (isset($_GET["dialed_label"])) {$dialed_label=$_GET["dialed_label"];} else {$dialed_label="";} if (isset($_POST["source_id"])) {$source_id=$_POST["source_id"];} elseif (isset($_GET["source_id"])) {$source_id=$_GET["source_id"];} else {$source_id="";} if (isset($_POST["rank"])) {$rank=$_POST["rank"];} elseif (isset($_GET["rank"])) {$rank=$_GET["rank"];} else {$rank="";} if (isset($_POST["owner"])) {$owner=$_POST["owner"];} elseif (isset($_GET["owner"])) {$owner=$_GET["owner"];} else {$owner="";} if (isset($_POST["camp_script"])) {$camp_script=$_POST["camp_script"];} elseif (isset($_GET["camp_script"])) {$camp_script=$_GET["camp_script"];} else {$camp_script="";} if (isset($_POST["in_script"])) {$in_script=$_POST["in_script"];} elseif (isset($_GET["in_script"])) {$in_script=$_GET["in_script"];} else {$in_script="";} if (isset($_POST["script_width"])) {$script_width=$_POST["script_width"];} elseif (isset($_GET["script_width"])) {$script_width=$_GET["script_width"];} else {$script_width=0;} if (isset($_POST["script_height"])) {$script_height=$_POST["script_height"];} elseif (isset($_GET["script_height"])) {$script_height=$_GET["script_height"];} else {$script_height=0;} if (isset($_POST["fullname"])) {$fullname=$_POST["fullname"];} elseif (isset($_GET["fullname"])) {$fullname=$_GET["fullname"];} else {$fullname="";} if (isset($_POST["recording_filename"])) {$recording_filename=$_POST["recording_filename"];} elseif (isset($_GET["recording_filename"])) {$recording_filename=$_GET["recording_filename"];} else {$recording_filename="";} if (isset($_POST["recording_id"])) {$recording_id=$_POST["recording_id"];} elseif (isset($_GET["recording_id"])) {$recording_id=$_GET["recording_id"];} else {$recording_id="";} if (isset($_POST["user_custom_one"])) {$user_custom_one=$_POST["user_custom_one"];} elseif (isset($_GET["user_custom_one"])) {$user_custom_one=$_GET["user_custom_one"];} else {$user_custom_one="";} if (isset($_POST["user_custom_two"])) {$user_custom_two=$_POST["user_custom_two"];} elseif (isset($_GET["user_custom_two"])) {$user_custom_two=$_GET["user_custom_two"];} else {$user_custom_two="";} if (isset($_POST["user_custom_three"])) {$user_custom_three=$_POST["user_custom_three"];} elseif (isset($_GET["user_custom_three"])) {$user_custom_three=$_GET["user_custom_three"];} else {$user_custom_three="";} if (isset($_POST["user_custom_four"])) {$user_custom_four=$_POST["user_custom_four"];} elseif (isset($_GET["user_custom_four"])) {$user_custom_four=$_GET["user_custom_four"];} else {$user_custom_four="";} if (isset($_POST["user_custom_five"])) {$user_custom_five=$_POST["user_custom_five"];} elseif (isset($_GET["user_custom_five"])) {$user_custom_five=$_GET["user_custom_five"];} else {$user_custom_five="";} if (isset($_POST["preset_number_a"])) {$preset_number_a=$_POST["preset_number_a"];} elseif (isset($_GET["preset_number_a"])) {$preset_number_a=$_GET["preset_number_a"];} else {$preset_number_a="";} if (isset($_POST["preset_number_b"])) {$preset_number_b=$_POST["preset_number_b"];} elseif (isset($_GET["preset_number_b"])) {$preset_number_b=$_GET["preset_number_b"];} else {$preset_number_b="";} if (isset($_POST["preset_number_c"])) {$preset_number_c=$_POST["preset_number_c"];} elseif (isset($_GET["preset_number_c"])) {$preset_number_c=$_GET["preset_number_c"];} else {$preset_number_c="";} if (isset($_POST["preset_number_d"])) {$preset_number_d=$_POST["preset_number_d"];} elseif (isset($_GET["preset_number_d"])) {$preset_number_d=$_GET["preset_number_d"];} else {$preset_number_d="";} if (isset($_POST["preset_number_e"])) {$preset_number_e=$_POST["preset_number_e"];} elseif (isset($_GET["preset_number_e"])) {$preset_number_e=$_GET["preset_number_e"];} else {$preset_number_e="";} if (isset($_POST["preset_number_f"])) {$preset_number_f=$_POST["preset_number_f"];} elseif (isset($_GET["preset_number_f"])) {$preset_number_f=$_GET["preset_number_f"];} else {$preset_number_f="";} if (isset($_POST["preset_dtmf_a"])) {$preset_dtmf_a=$_POST["preset_dtmf_a"];} elseif (isset($_GET["preset_dtmf_a"])) {$preset_dtmf_a=$_GET["preset_dtmf_a"];} else {$preset_dtmf_a="";} if (isset($_POST["preset_dtmf_b"])) {$preset_dtmf_b=$_POST["preset_dtmf_b"];} elseif (isset($_GET["preset_dtmf_b"])) {$preset_dtmf_b=$_GET["preset_dtmf_b"];} else {$preset_dtmf_b="";} if (isset($_POST["ScrollDIV"])) {$ScrollDIV=$_POST["ScrollDIV"];} elseif (isset($_GET["ScrollDIV"])) {$ScrollDIV=$_GET["ScrollDIV"];} else {$ScrollDIV=0;} if (isset($_POST["ignore_list_script"])) {$ignore_list_script=$_POST["ignore_list_script"];} elseif (isset($_GET["ignore_list_script"])) {$ignore_list_script=$_GET["ignore_list_script"];} else {$ignore_list_script="";} if (isset($_POST["DB"])) {$DB=$_POST["DB"];} elseif (isset($_GET["DB"])) {$DB=$_GET["DB"];} if (isset($_POST["process"])) {$process=$_POST["process"];} elseif (isset($_GET["process"])) {$process=$_GET["process"];} else {$process=0;} if (isset($_POST["vicidial_id"])) {$vicidial_id=$_POST["vicidial_id"];} elseif (isset($_GET["vicidial_id"])) {$vicidial_id=$_GET["vicidial_id"];} else {$vicidial_id="";} if (isset($_POST["call_date"])) {$call_date=$_POST["call_date"];} elseif (isset($_GET["call_date"])) {$call_date=$_GET["call_date"];} else {$call_date="";} if (isset($_POST["order_id"])) {$order_id=$_POST["order_id"];} elseif (isset($_GET["order_id"])) {$order_id=$_GET["order_id"];} else {$order_id="";} if (isset($_POST["appointment_date"])) {$appointment_date=$_POST["appointment_date"];} elseif (isset($_GET["appointment_date"])) {$appointment_date=$_GET["appointment_date"];} else {$appointment_date="";} if (isset($_POST["appointment_time"])) {$appointment_time=$_POST["appointment_time"];} elseif (isset($_GET["appointment_time"])) {$appointment_time=$_GET["appointment_time"];} else {$appointment_time="";} if (isset($_POST["call_notes"])) {$call_notes=$_POST["call_notes"];} elseif (isset($_GET["call_notes"])) {$call_notes=$_GET["call_notes"];} else {$call_notes="";} if (isset($_POST["notesid"])) {$notesid=$_POST["notesid"];} elseif (isset($_GET["notesid"])) {$notesid=$_GET["notesid"];} else {$notesid=0;} if (strlen($vicidial_id) < 1) {$vicidial_id = $uniqueid;} if (strlen($appointment_time) < 1) {$appointment_time = '12:00:00';} # if options file exists, use the override values for the above variables # see the options-example.php file for more information if (file_exists('options.php')) { require('options.php'); } header ("Content-type: text/html; charset=utf-8"); header ("Cache-Control: no-cache, must-revalidate"); // HTTP/1.1 header ("Pragma: no-cache"); // HTTP/1.0 $txt = '.txt'; $StarTtime = date("U"); $NOW_DATE = date("Y-m-d"); $NOW_TIME = date("Y-m-d H:i:s"); $CIDdate = date("mdHis"); $ENTRYdate = date("YmdHis"); $MT[0]=''; $agents='@agents'; # default optional vars if not set if (!isset($format)) {$format="text";} if ($format == 'debug') {$DB=1;} if (!isset($ACTION)) {$ACTION="refresh";} if (!isset($query_date)) {$query_date = $NOW_DATE;} if (strlen($call_date) < 1) {$call_date = $NOW_TIME;} $user=preg_replace("/\'|\"|\\\\|;| /","",$user); $pass=preg_replace("/\'|\"|\\\\|;| /","",$pass); $PHP_SELF=$_SERVER['PHP_SELF']; $PHP_SELF = preg_replace('/\.php.*/i','.php',$PHP_SELF); ############################################# ##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP ##### $stmt = "SELECT use_non_latin,timeclock_end_of_day,agentonly_callback_campaign_lock,custom_fields_enabled,enable_languages,language_method,allow_web_debug FROM system_settings;"; #if ($DB) {echo "$stmt\n";} $rslt=mysql_to_mysqli($stmt, $link); if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'00XXX',$user,$server_ip,$session_name,$one_mysql_log);} $qm_conf_ct = mysqli_num_rows($rslt); if ($qm_conf_ct > 0) { $row=mysqli_fetch_row($rslt); $non_latin = $row[0]; $timeclock_end_of_day = $row[1]; $agentonly_callback_campaign_lock = $row[2]; $custom_fields_enabled = $row[3]; $SSenable_languages = $row[4]; $SSlanguage_method = $row[5]; $SSallow_web_debug = $row[6]; } if ($SSallow_web_debug < 1 || !isset($DB)) {$DB=0; $format='text';} $DB=preg_replace("/[^0-9a-zA-Z]/","",$DB); $VUselected_language = ''; $stmt="SELECT selected_language from vicidial_users where user='$user';"; if ($DB) {echo "|$stmt|\n";} $rslt=mysql_to_mysqli($stmt, $link); if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'00XXX',$user,$server_ip,$session_name,$one_mysql_log);} $sl_ct = mysqli_num_rows($rslt); if ($sl_ct > 0) { $row=mysqli_fetch_row($rslt); $VUselected_language = $row[0]; } ##### END SETTINGS LOOKUP ##### ########################################### $lead_id = preg_replace('/[^0-9]/', '', $lead_id); $list_id = preg_replace('/[^0-9]/', '', $list_id); $notesid = preg_replace('/[^0-9]/', '', $notesid); $server_ip = preg_replace('/[^-\.\:\_0-9a-zA-Z]/','',$server_ip); $session_id = preg_replace('/[^0-9]/','',$session_id); # $uniqueid = preg_replace('/[^-_\.0-9a-zA-Z]/','',$uniqueid); $phone_code = preg_replace("/[^0-9]/","",$phone_code); $phone_number = preg_replace("/[^0-9]/","",$phone_number); $vendor_id = preg_replace("/\"|\\\\|;/",'-',$vendor_id); $vendor_lead_code = preg_replace("/\"|\\\\|;/",'-',$vendor_lead_code); $gmt_offset_now = preg_replace("/\"|\\\\|;/",'-',$gmt_offset_now); $title = preg_replace("/\"|\\\\|;/",'-',$title); $first_name = preg_replace("/\"|\\\\|;/",'-',$first_name); $middle_initial = preg_replace("/\"|\\\\|;/",'-',$middle_initial); $last_name = preg_replace("/\"|\\\\|;/",'-',$last_name); $address1 = preg_replace("/\"|\\\\|;/",'-',$address1); $address2 = preg_replace("/\"|\\\\|;/",'-',$address2); $address3 = preg_replace("/\"|\\\\|;/",'-',$address3); $city = preg_replace("/\"|\\\\|;/",'-',$city); $state = preg_replace("/\"|\\\\|;/",'-',$state); $province = preg_replace("/\"|\\\\|;/",'-',$province); $postal_code = preg_replace("/\"|\\\\|;/",'-',$postal_code); $country_code = preg_replace("/\"|\\\\|;/",'-',$country_code); $gender = preg_replace("/\"|\\\\|;/",'-',$gender); $date_of_birth = preg_replace("/\"|\\\\|;/",'-',$date_of_birth); $alt_phone = preg_replace("/\"|\\\\|;/",'-',$alt_phone); $email = preg_replace("/\"|\\\\|;/",'-',$email); $security_phrase = preg_replace("/\"|\\\\|;/",'-',$security_phrase); $comments = preg_replace("/\"|\\\\|;/",'-',$comments); $pass = preg_replace("/\<|\>|\"|\\\\|;/",'-',$pass); $phone_login = preg_replace("/\<|\>|\"|\\\\|;/",'-',$phone_login); $original_phone_login = preg_replace("/\<|\>|\"|\\\\|;/",'-',$original_phone_login); $phone_pass = preg_replace("/\<|\>|\"|\\\\|;/",'-',$phone_pass); $fronter = preg_replace("/\<|\>|\"|\\\\|;/",'-',$fronter); $closer = preg_replace("/\<|\>|\"|\\\\|;/",'-',$closer); $channel_group = preg_replace("/\<|\>|\"|\\\\|;/",'-',$channel_group); $SQLdate = preg_replace("/\<|\>|\"|\\\\|;/",'-',$SQLdate); $epoch = preg_replace("/\<|\>|\"|\\\\|;/",'-',$epoch); $customer_zap_channel = preg_replace("/\<|\>|\"|\\\\|;/",'-',$customer_zap_channel); $customer_server_ip = preg_replace("/\<|\>|\"|\\\\|;/",'-',$customer_server_ip); $SIPexten = preg_replace("/\<|\>|\"|\\\\|;/",'-',$SIPexten); $phone = preg_replace("/\<|\>|\"|\\\\|;/",'-',$phone); $parked_by = preg_replace("/\<|\>|\"|\\\\|;/",'-',$parked_by); $dispo = preg_replace("/\<|\>|\"|\\\\|;/",'-',$dispo); $dialed_number = preg_replace("/\<|\>|\"|\\\\|;/",'-',$dialed_number); $dialed_label = preg_replace("/\<|\>|\"|\\\\|;/",'-',$dialed_label); $source_id = preg_replace("/\<|\>|\"|\\\\|;/",'-',$source_id); $rank = preg_replace("/\<|\>|\"|\\\\|;/",'-',$rank); $owner = preg_replace("/\<|\>|\"|\\\\|;/",'-',$owner); $camp_script = preg_replace("/\<|\>|\"|\\\\|;/",'-',$camp_script); $in_script = preg_replace("/\<|\>|\"|\\\\|;/",'-',$in_script); $script_width = preg_replace("/\<|\>|\"|\\\\|;/",'-',$script_width); $script_height = preg_replace("/\<|\>|\"|\\\\|;/",'-',$script_height); $fullname = preg_replace("/\<|\>|\"|\\\\|;/",'-',$fullname); $recording_filename = preg_replace("/\<|\>|\"|\\\\|;/",'-',$recording_filename); $recording_id = preg_replace("/\<|\>|\"|\\\\|;/",'-',$recording_id); $user_custom_one = preg_replace("/\"|\\\\|;/",'-',$user_custom_one); $user_custom_two = preg_replace("/\"|\\\\|;/",'-',$user_custom_two); $user_custom_three = preg_replace("/\"|\\\\|;/",'-',$user_custom_three); $user_custom_four = preg_replace("/\"|\\\\|;/",'-',$user_custom_four); $user_custom_five = preg_replace("/\"|\\\\|;/",'-',$user_custom_five); $preset_number_a = preg_replace("/\<|\>|\"|\\\\|;/",'-',$preset_number_a); $preset_number_b = preg_replace("/\<|\>|\"|\\\\|;/",'-',$preset_number_b); $preset_number_c = preg_replace("/\<|\>|\"|\\\\|;/",'-',$preset_number_c); $preset_number_d = preg_replace("/\<|\>|\"|\\\\|;/",'-',$preset_number_d); $preset_number_e = preg_replace("/\<|\>|\"|\\\\|;/",'-',$preset_number_e); $preset_number_f = preg_replace("/\<|\>|\"|\\\\|;/",'-',$preset_number_f); $preset_dtmf_a = preg_replace("/\<|\>|\"|\\\\|;/",'-',$preset_dtmf_a); $preset_dtmf_b = preg_replace("/\<|\>|\"|\\\\|;/",'-',$preset_dtmf_b); $ScrollDIV = preg_replace("/\<|\>|\"|\\\\|;/",'-',$ScrollDIV); $ignore_list_script = preg_replace("/\<|\>|\"|\\\\|;/",'-',$ignore_list_script); $DB = preg_replace("/\"|\\\\|;/",'-',$DB); $process = preg_replace("/[^0-9]/",'',$process); $vicidial_id = preg_replace("/\"|\\\\|;/",'-',$vicidial_id); $call_date = preg_replace("/\"|\\\\|;/",'-',$call_date); $order_id = preg_replace("/\"|\\\\|;/",'-',$order_id); $appointment_date = preg_replace("/\<|\>|\"|\\\\|;/",'-',$appointment_date); $appointment_time = preg_replace("/\<|\>|\"|\\\\|;/",'-',$appointment_time); $call_notes = preg_replace("/\<|\>|\"|\\\\|;/",'-',$call_notes ); if ($non_latin < 1) { $user=preg_replace("/[^-_0-9a-zA-Z]/","",$user); $pass=preg_replace("/[^-\.\+\/\=_0-9a-zA-Z]/","",$pass); $campaign = preg_replace('/[^-_0-9a-zA-Z]/','',$campaign); $group = preg_replace('/[^-_0-9a-zA-Z]/','',$group); $uniqueid = preg_replace('/[^-_\.0-9a-zA-Z]/','',$uniqueid); } else { $user = preg_replace('/[^-_0-9\p{L}]/u','',$user); $pass = preg_replace('/[^-\.\+\/\=_0-9\p{L}]/u','',$pass); $campaign = preg_replace('/[^-_0-9\p{L}]/u','',$campaign); $group = preg_replace('/[^-_0-9\p{L}]/u','',$group); $uniqueid = preg_replace('/[^-_\.0-9\p{L}]/u','',$uniqueid); } $appointment_timeARRAY = explode(":",$appointment_time); $appointment_hour = $appointment_timeARRAY[0]; $appointment_min = $appointment_timeARRAY[1]; if ($notesid < 100) {$notesid=0;} if ($DB > 0) { echo "
$lead_id|$entry_date|$modify_date|$status|$user|$vendor_lead_code|$source_id|$list_id|$gmt_offset_now|$called_since_last_reset|$phone_code|$phone_number|$title|$first_name|$middle_initial|$last_name|$address1|$address2|$address3|$city|$state|$province|$postal_code|$country_code|$gender|$date_of_birth|$alt_phone|$email|$security_phrase|$comments|$called_count|$last_local_call_time|$rank|$owner|\n
"; } ### BEGIN find any custom field labels ### $label_title = _QXZ("Title"); $label_first_name = _QXZ("First"); $label_middle_initial = _QXZ("MI"); $label_last_name = _QXZ("Last"); $label_address1 = _QXZ("Address1"); $label_address2 = _QXZ("Address2"); $label_address3 = _QXZ("Address3"); $label_city = _QXZ("City"); $label_state = _QXZ("State"); $label_province = _QXZ("Province"); $label_postal_code = _QXZ("PostCode"); $label_vendor_lead_code = _QXZ("Vendor ID"); $label_gender = _QXZ("Gender"); $label_phone_number = _QXZ("Phone"); $label_phone_code = _QXZ("DialCode"); $label_alt_phone = _QXZ("Alt. Phone"); $label_security_phrase = _QXZ("Show"); $label_email = _QXZ("Email"); $label_comments = _QXZ("Comments"); $stmt="SELECT label_title,label_first_name,label_middle_initial,label_last_name,label_address1,label_address2,label_address3,label_city,label_state,label_province,label_postal_code,label_vendor_lead_code,label_gender,label_phone_number,label_phone_code,label_alt_phone,label_security_phrase,label_email,label_comments from system_settings;"; $rslt=mysql_to_mysqli($stmt, $link); $row=mysqli_fetch_row($rslt); if (strlen($row[0])>0) {$label_title = $row[0];} if (strlen($row[1])>0) {$label_first_name = $row[1];} if (strlen($row[2])>0) {$label_middle_initial = $row[2];} if (strlen($row[3])>0) {$label_last_name = $row[3];} if (strlen($row[4])>0) {$label_address1 = $row[4];} if (strlen($row[5])>0) {$label_address2 = $row[5];} if (strlen($row[6])>0) {$label_address3 = $row[6];} if (strlen($row[7])>0) {$label_city = $row[7];} if (strlen($row[8])>0) {$label_state = $row[8];} if (strlen($row[9])>0) {$label_province = $row[9];} if (strlen($row[10])>0) {$label_postal_code = $row[10];} if (strlen($row[11])>0) {$label_vendor_lead_code = $row[11];} if (strlen($row[12])>0) {$label_gender = $row[12];} if (strlen($row[13])>0) {$label_phone_number = $row[13];} if (strlen($row[14])>0) {$label_phone_code = $row[14];} if (strlen($row[15])>0) {$label_alt_phone = $row[15];} if (strlen($row[16])>0) {$label_security_phrase = $row[16];} if (strlen($row[17])>0) {$label_email = $row[17];} if (strlen($row[18])>0) {$label_comments = $row[18];} ### END find any custom field labels ### $auth=0; $auth_message = user_authorization($user,$pass,'',0,0,0,0,'script_notes'); if ($auth_message == 'GOOD') {$auth=1;} if( (strlen($user)<2) or (strlen($pass)<2) or ($auth==0)) { echo _QXZ("Invalid Username/Password:")." |$user|$pass|$auth_message|\n"; exit; } echo "\n"; echo "\n"; echo "\n"; echo ""._QXZ("ViciDial Notes"); echo "\n"; echo "\n"; echo "\n"; ?> \n"; echo "\n"; if ($process > 0) { #Update vicidial_list record $stmt="UPDATE vicidial_list SET vendor_lead_code='" . mysqli_real_escape_string($link, $vendor_lead_code) . "',title='" . mysqli_real_escape_string($link, $title) . "',first_name='" . mysqli_real_escape_string($link, $first_name) . "',middle_initial='" . mysqli_real_escape_string($link, $middle_initial) . "',last_name='" . mysqli_real_escape_string($link, $last_name) . "',address1='" . mysqli_real_escape_string($link, $address1) . "',address2='" . mysqli_real_escape_string($link, $address2) . "',address3='" . mysqli_real_escape_string($link, $address3) . "',city='" . mysqli_real_escape_string($link, $city) . "',state='" . mysqli_real_escape_string($link, $state) . "',province='" . mysqli_real_escape_string($link, $province) . "',postal_code='" . mysqli_real_escape_string($link, $postal_code) . "',phone_code='" . mysqli_real_escape_string($link, $phone_code) . "',phone_number='" . mysqli_real_escape_string($link, $phone_number) . "',gender='" . mysqli_real_escape_string($link, $gender) . "',date_of_birth='" . mysqli_real_escape_string($link, $date_of_birth) . "',alt_phone='" . mysqli_real_escape_string($link, $alt_phone) . "',email='" . mysqli_real_escape_string($link, $email) . "',security_phrase='" . mysqli_real_escape_string($link, $security_phrase) . "',comments='" . mysqli_real_escape_string($link, $comments) . "',rank='" . mysqli_real_escape_string($link, $rank) . "',owner='" . mysqli_real_escape_string($link, $owner) . "' where lead_id='$lead_id';"; if ($DB) {echo "$stmt\n";} $rslt=mysql_to_mysqli($stmt, $link); $affected_rows = mysqli_affected_rows($link); #Update the agent screen with new data $stmt="UPDATE vicidial_live_agents set external_update_fields='1',external_update_fields_data='vendor_lead_code,title,first_name,middle_initial,last_name,address1,address2,address3,city,state,province,postal_code,phone_code,phone_number,gender,date_of_birth,alt_phone,email,security_phrase,comments,rank,owner' where user='$user';"; if ($DB) {echo "$stmt\n";} $rslt=mysql_to_mysqli($stmt, $link); $affected_rows = mysqli_affected_rows($link); if ($notesid < 100) { # Insert into vicidial_call_notes $stmt="INSERT INTO vicidial_call_notes set lead_id='$lead_id',vicidial_id='" . mysqli_real_escape_string($link, $vicidial_id) . "',call_date='" . mysqli_real_escape_string($link, $call_date) . "',order_id='" . mysqli_real_escape_string($link, $order_id) . "',appointment_date='" . mysqli_real_escape_string($link, $appointment_date) . "',appointment_time='" . mysqli_real_escape_string($link, $appointment_time) . "',call_notes='" . mysqli_real_escape_string($link, $call_notes) . "';"; if ($DB) {echo "$stmt\n";} $rslt=mysql_to_mysqli($stmt, $link); $affected_rows = mysqli_affected_rows($link); $notesid = mysqli_insert_id($link); } else { # update vicidial_call_notes record $stmt="UPDATE vicidial_call_notes set order_id='" . mysqli_real_escape_string($link, $order_id) . "',appointment_date='" . mysqli_real_escape_string($link, $appointment_date) . "',appointment_time='" . mysqli_real_escape_string($link, $appointment_time) . "',call_notes='" . mysqli_real_escape_string($link, $call_notes) . "' where notesid='$notesid';"; if ($DB) {echo "$stmt\n";} $rslt=mysql_to_mysqli($stmt, $link); $affected_rows = mysqli_affected_rows($link); } echo "
Data Changes Accepted

"; } $URLarray = explode("?", $PHP_SELF); $URLsubmit = $URLarray[0]; ?>
>
: *
: *
: *
:
:
: *
: *
: *
: *


,           *
" name=smt id=smt onClick="submit_form()">