LICENSE: AGPLv2
#
# variables sent to this script:
# $phone_login - phone login
# $phone_pass - phone password
# $server_ip - the server that you are to login to
# $callerid - the callerid number
# $protocol - IAX or SIP
# $codecs - list of codecs to use
# $options - optional webphone settings
# $system_key - key optionally used by the webphone service to validate the user
#
# CHANGELOG
# 100130-2359 - First Build of VICIDIAL web client basic login process finished
# 100424-2102 - Added codecs option and updated zoiperweb code reference
# 100827-1417 - Added system_key variable
# 101227-1313 - Added DIALPLAN_OFF_TOGGLE option
# 110526-1726 - Added AUTOANSWER option
# 210823-0959 - Fix for security issue
#
if (isset($_GET["DB"])) {$DB=$_GET["DB"];}
elseif (isset($_POST["DB"])) {$DB=$_POST["DB"];}
if (isset($_GET["phone_login"])) {$phone_login=$_GET["phone_login"];}
elseif (isset($_POST["phone_login"])) {$phone_login=$_POST["phone_login"];}
if (isset($_GET["phone_pass"])) {$phone_pass=$_GET["phone_pass"];}
elseif (isset($_POST["phone_pass"])) {$phone_pass=$_POST["phone_pass"];}
if (isset($_GET["server_ip"])) {$server_ip=$_GET["server_ip"];}
elseif (isset($_POST["server_ip"])) {$server_ip=$_POST["server_ip"];}
if (isset($_GET["callerid"])) {$callerid=$_GET["callerid"];}
elseif (isset($_POST["callerid"])) {$callerid=$_POST["callerid"];}
if (isset($_GET["protocol"])) {$protocol=$_GET["protocol"];}
elseif (isset($_POST["protocol"])) {$protocol=$_POST["protocol"];}
if (isset($_GET["codecs"])) {$codecs=$_GET["codecs"];}
elseif (isset($_POST["codecs"])) {$codecs=$_POST["codecs"];}
if (isset($_GET["options"])) {$options=$_GET["options"];}
elseif (isset($_POST["options"])) {$options=$_POST["options"];}
if (isset($_GET["system_key"])) {$system_key=$_GET["system_key"];}
elseif (isset($_POST["system_key"])) {$system_key=$_POST["system_key"];}
$b64_phone_login = base64_decode($phone_login);
$b64_phone_pass = base64_decode($phone_pass);
$b64_server_ip = base64_decode($server_ip);
$b64_callerid = base64_decode($callerid);
$b64_protocol = base64_decode($protocol);
$b64_codecs = base64_decode($codecs);
$b64_options = base64_decode($options);
$b64_system_key = base64_decode($system_key);
if ($b64_protocol != 'SIP')
{$b64_protocol = 'IAX';}
$b64_phone_login = preg_replace('/[^-\*\#\.\:\/\@\_0-9\p{L}]/u','',$b64_phone_login);
$b64_phone_pass = preg_replace('/[^-\*\#\.\:\/\@\_0-9\p{L}]/u','',$b64_phone_pass);
$b64_server_ip = preg_replace('/[^-\*\#\.\:\/\@\_0-9\p{L}]/u','',$b64_server_ip);
$b64_callerid = preg_replace('/[^-\*\#\.\:\/\@\_0-9\p{L}]/u','',$b64_callerid);
$b64_protocol = preg_replace('/[^-\*\#\.\:\/\@\_0-9\p{L}]/u','',$b64_protocol);
$b64_codecs = preg_replace('/[^-\*\#\.\:\/\@\_0-9\p{L}]/u','',$b64_codecs);
$b64_options = preg_replace('/[^-\*\#\.\:\/\@\_0-9\p{L}]/u','',$b64_options);
$b64_system_key = preg_replace('/[^-\*\#\.\:\/\@\_0-9\p{L}]/u','',$b64_system_key);
?>
Zoiper web
Ready
DIALPAD -\n";}
if (preg_match("/DIALPAD_OFF_TOGGLE/i",$b64_options))
{echo "DIALPAD +\n";}
?>