282 lines
9.9 KiB
PHP
282 lines
9.9 KiB
PHP
<?php
|
|
# call_log_display.php version 2.14
|
|
#
|
|
# Copyright (C) 2022 Matt Florell <vicidial@gmail.com> LICENSE: AGPLv2
|
|
#
|
|
# This script is designed purely to send the inbound and outbound calls for a specific phone
|
|
# This script depends on the server_ip being sent and also needs to have a valid user/pass from the vicidial_users table
|
|
#
|
|
# required variables:
|
|
# - $server_ip
|
|
# - $session_name
|
|
# - $user
|
|
# - $pass
|
|
# optional variables:
|
|
# - $format - ('text','debug')
|
|
# - $exten - ('cc101','testphone','49-1','1234','913125551212',...)
|
|
# - $protocol - ('SIP','Zap','IAX2',...)
|
|
# - $in_limit - ('10','20','50','100',...)
|
|
# - $out_limit - ('10','20','50','100',...)
|
|
#
|
|
#
|
|
# changes
|
|
# 50406-1013 - First build of script
|
|
# 50407-1452 - Added definable limits
|
|
# 50503-1236 - added session_name checking for extra security
|
|
# 50610-1158 - Added NULL check on MySQL results to reduced errors
|
|
# 50711-1202 - removed HTTP authentication in favor of user/pass vars
|
|
# 60323-1550 - added option for showing different number dialed in log
|
|
# 60421-1401 - check GET/POST vars lines with isset to not trigger PHP NOTICES
|
|
# 60619-1202 - Added variable filters to close security holes for login form
|
|
# 90508-0727 - Changed to PHP long tags
|
|
# 130328-0028 - Converted ereg to preg functions
|
|
# 130603-2219 - Added login lockout for 15 minutes after 10 failed logins, and other security fixes
|
|
# 130705-1524 - Added optional encrypted passwords compatibility
|
|
# 130802-1005 - Changed to PHP mysqli functions
|
|
# 140811-0847 - Changed to use QXZ function for echoing text
|
|
# 141118-1232 - Formatting changes for QXZ output
|
|
# 141128-0852 - Code cleanup for QXZ functions
|
|
# 141216-2113 - Added language settings lookups and user/pass variable standardization
|
|
# 150723-1714 - Added ajax logging
|
|
# 170526-2215 - Added additional variable filtering
|
|
# 190111-0904 - Fix for PHP7
|
|
# 201117-2200 - Changes for better compatibility with non-latin data input
|
|
# 210616-2102 - Added optional CORS support, see options.php for details
|
|
# 210825-0903 - Fix for XSS security issue
|
|
# 220220-0920 - Added allow_web_debug system setting
|
|
#
|
|
|
|
$version = '2.14-24';
|
|
$build = '220220-0920';
|
|
$php_script = 'call_log_display.php';
|
|
$SSagent_debug_logging=0;
|
|
$startMS = microtime();
|
|
|
|
require_once("dbconnect_mysqli.php");
|
|
require_once("functions.php");
|
|
|
|
### If you have globals turned off uncomment these lines
|
|
if (isset($_GET["user"])) {$user=$_GET["user"];}
|
|
elseif (isset($_POST["user"])) {$user=$_POST["user"];}
|
|
if (isset($_GET["pass"])) {$pass=$_GET["pass"];}
|
|
elseif (isset($_POST["pass"])) {$pass=$_POST["pass"];}
|
|
if (isset($_GET["server_ip"])) {$server_ip=$_GET["server_ip"];}
|
|
elseif (isset($_POST["server_ip"])) {$server_ip=$_POST["server_ip"];}
|
|
if (isset($_GET["session_name"])) {$session_name=$_GET["session_name"];}
|
|
elseif (isset($_POST["session_name"])) {$session_name=$_POST["session_name"];}
|
|
if (isset($_GET["format"])) {$format=$_GET["format"];}
|
|
elseif (isset($_POST["format"])) {$format=$_POST["format"];}
|
|
if (isset($_GET["exten"])) {$exten=$_GET["exten"];}
|
|
elseif (isset($_POST["exten"])) {$exten=$_POST["exten"];}
|
|
if (isset($_GET["protocol"])) {$protocol=$_GET["protocol"];}
|
|
elseif (isset($_POST["protocol"])) {$protocol=$_POST["protocol"];}
|
|
|
|
$user=preg_replace("/\'|\"|\\\\|;| /","",$user);
|
|
$pass=preg_replace("/\'|\"|\\\\|;| /","",$pass);
|
|
|
|
# default optional vars if not set
|
|
if (!isset($format)) {$format="text";}
|
|
if (!isset($in_limit)) {$in_limit="100";}
|
|
if (!isset($out_limit)) {$out_limit="100";}
|
|
$number_dialed = 'number_dialed';
|
|
#$number_dialed = 'extension';
|
|
|
|
$StarTtime = date("U");
|
|
$NOW_DATE = date("Y-m-d");
|
|
$NOW_TIME = date("Y-m-d H:i:s");
|
|
if (!isset($query_date)) {$query_date = $NOW_DATE;}
|
|
|
|
# if options file exists, use the override values for the above variables
|
|
# see the options-example.php file for more information
|
|
if (file_exists('options.php'))
|
|
{
|
|
require('options.php');
|
|
}
|
|
|
|
#############################################
|
|
##### START SYSTEM_SETTINGS AND USER LANGUAGE LOOKUP #####
|
|
$stmt = "SELECT use_non_latin,enable_languages,language_method,agent_debug_logging,allow_web_debug FROM system_settings;";
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'03001',$user,$server_ip,$session_name,$one_mysql_log);}
|
|
#if ($DB) {echo "$stmt\n";}
|
|
$qm_conf_ct = mysqli_num_rows($rslt);
|
|
if ($qm_conf_ct > 0)
|
|
{
|
|
$row=mysqli_fetch_row($rslt);
|
|
$non_latin = $row[0];
|
|
$SSenable_languages = $row[1];
|
|
$SSlanguage_method = $row[2];
|
|
$SSagent_debug_logging = $row[3];
|
|
$SSallow_web_debug = $row[4];
|
|
}
|
|
if ($SSallow_web_debug < 1) {$DB=0; $format="text";}
|
|
|
|
$VUselected_language = '';
|
|
$stmt="SELECT selected_language from vicidial_users where user='$user';";
|
|
if ($DB) {echo "|$stmt|\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
if ($mel > 0) {mysql_error_logging($NOW_TIME,$link,$mel,$stmt,'00XXX',$VD_login,$server_ip,$session_name,$one_mysql_log);}
|
|
$sl_ct = mysqli_num_rows($rslt);
|
|
if ($sl_ct > 0)
|
|
{
|
|
$row=mysqli_fetch_row($rslt);
|
|
$VUselected_language = $row[0];
|
|
}
|
|
##### END SETTINGS LOOKUP #####
|
|
###########################################
|
|
|
|
$session_name = preg_replace('/[^-\.\:\_0-9a-zA-Z]/','',$session_name);
|
|
$server_ip = preg_replace('/[^-\.\:\_0-9a-zA-Z]/','',$server_ip);
|
|
$exten = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$exten);
|
|
$protocol = preg_replace("/\||`|&|\'|\"|\\\\|;| /","",$protocol);
|
|
$in_limit = preg_replace('/[^0-9]/','',$in_limit);
|
|
$out_limit = preg_replace('/[^0-9]/','',$out_limit);
|
|
$format = preg_replace('/[^-_0-9a-zA-Z]/','',$format);
|
|
|
|
if ($non_latin < 1)
|
|
{
|
|
$user=preg_replace("/[^-_0-9a-zA-Z]/","",$user);
|
|
$pass=preg_replace("/[^-\.\+\/\=_0-9a-zA-Z]/","",$pass);
|
|
}
|
|
else
|
|
{
|
|
$user = preg_replace('/[^-_0-9\p{L}]/u','',$user);
|
|
$pass = preg_replace('/[^-\.\+\/\=_0-9\p{L}]/u','',$pass);
|
|
}
|
|
|
|
if (strlen($SSagent_debug_logging) > 1)
|
|
{
|
|
if ($SSagent_debug_logging == "$user")
|
|
{$SSagent_debug_logging=1;}
|
|
else
|
|
{$SSagent_debug_logging=0;}
|
|
}
|
|
|
|
$auth=0;
|
|
$auth_message = user_authorization($user,$pass,'',0,1,0,0,'call_log_display');
|
|
if ($auth_message == 'GOOD')
|
|
{$auth=1;}
|
|
|
|
if( (strlen($user)<2) or (strlen($pass)<2) or ($auth==0))
|
|
{
|
|
echo _QXZ("Invalid Username/Password:")." |$user|$pass|$auth_message|\n";
|
|
exit;
|
|
}
|
|
else
|
|
{
|
|
if( (strlen($server_ip)<6) or (!isset($server_ip)) or ( (strlen($session_name)<12) or (!isset($session_name)) ) )
|
|
{
|
|
echo _QXZ("Invalid server_ip: %1s or Invalid session_name: %2s",0,'',$server_ip,$session_name)."\n";
|
|
exit;
|
|
}
|
|
else
|
|
{
|
|
$stmt="SELECT count(*) from web_client_sessions where session_name='$session_name' and server_ip='$server_ip';";
|
|
if ($DB) {echo "|$stmt|\n";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
$row=mysqli_fetch_row($rslt);
|
|
$SNauth=$row[0];
|
|
if($SNauth==0)
|
|
{
|
|
echo _QXZ("Invalid session_name:")." |$session_name|$server_ip|\n";
|
|
exit;
|
|
}
|
|
else
|
|
{
|
|
# do nothing for now
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($format=='debug')
|
|
{
|
|
echo "<html>\n";
|
|
echo "<head>\n";
|
|
echo "<!-- VERSION: $version BUILD: $build EXTEN: $exten server_ip: $server_ip-->\n";
|
|
echo "<title>".QXZ("Call Log Display");
|
|
echo "</title>\n";
|
|
echo "</head>\n";
|
|
echo "<BODY BGCOLOR=white marginheight=0 marginwidth=0 leftmargin=0 topmargin=0>\n";
|
|
}
|
|
|
|
|
|
$row=''; $rowx='';
|
|
$channel_live=1;
|
|
if ( (strlen($exten)<1) or (strlen($protocol)<3) )
|
|
{
|
|
$channel_live=0;
|
|
echo _QXZ("Exten %1s is not valid or protocol %2s is not valid",0,'',$exten,$protocol)."\n";
|
|
exit;
|
|
}
|
|
else
|
|
{
|
|
##### print outbound calls from the call_log table
|
|
$stmt="SELECT uniqueid,start_time,$number_dialed,length_in_sec FROM call_log where server_ip = '$server_ip' and channel LIKE \"$protocol/$exten%\" order by start_time desc limit $out_limit;";
|
|
if ($format=='debug') {echo "\n<!-- $stmt -->";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
if ($rslt) {$out_calls_count = mysqli_num_rows($rslt);}
|
|
echo "$out_calls_count|";
|
|
$loop_count=0;
|
|
while ($out_calls_count>$loop_count)
|
|
{
|
|
$loop_count++;
|
|
$row=mysqli_fetch_row($rslt);
|
|
|
|
$call_time_M = ($row[3] / 60);
|
|
$call_time_M = round($call_time_M, 2);
|
|
$call_time_M_int = intval("$call_time_M");
|
|
$call_time_SEC = ($call_time_M - $call_time_M_int);
|
|
$call_time_SEC = ($call_time_SEC * 60);
|
|
$call_time_SEC = round($call_time_SEC, 0);
|
|
if ($call_time_SEC < 10) {$call_time_SEC = "0$call_time_SEC";}
|
|
$call_time_MS = "$call_time_M_int:$call_time_SEC";
|
|
|
|
if ($number_dialed == 'extension') {$row[2] = substr($row[2],-10);}
|
|
echo "$row[0] ~$row[1] ~$row[2] ~$call_time_MS|";
|
|
}
|
|
echo "\n";
|
|
|
|
##### print inbound calls from the live_inbound_log table
|
|
$stmt="SELECT call_log.uniqueid,live_inbound_log.start_time,live_inbound_log.extension,caller_id,length_in_sec from live_inbound_log,call_log where phone_ext='$exten' and live_inbound_log.server_ip = '$server_ip' and call_log.uniqueid=live_inbound_log.uniqueid order by start_time desc limit $in_limit;";
|
|
if ($format=='debug') {echo "\n<!-- $stmt -->";}
|
|
$rslt=mysql_to_mysqli($stmt, $link);
|
|
if ($rslt) {$in_calls_count = mysqli_num_rows($rslt);}
|
|
echo "$in_calls_count|";
|
|
$loop_count=0;
|
|
while ($in_calls_count>$loop_count)
|
|
{
|
|
$loop_count++;
|
|
$row=mysqli_fetch_row($rslt);
|
|
|
|
$call_time_M = ($row[4] / 60);
|
|
$call_time_M = round($call_time_M, 2);
|
|
$call_time_M_int = intval("$call_time_M");
|
|
$call_time_SEC = ($call_time_M - $call_time_M_int);
|
|
$call_time_SEC = ($call_time_SEC * 60);
|
|
$call_time_SEC = round($call_time_SEC, 0);
|
|
if ($call_time_SEC < 10) {$call_time_SEC = "0$call_time_SEC";}
|
|
$call_time_MS = "$call_time_M_int:$call_time_SEC";
|
|
$callerIDnum = $row[3]; $callerIDname = $row[3];
|
|
$callerIDnum = preg_replace("/.*<|>.*/","",$callerIDnum);
|
|
$callerIDname = preg_replace("/\"| <\d*>/","",$callerIDname);
|
|
|
|
echo "$row[0] ~$row[1] ~$row[2] ~$callerIDnum ~$callerIDname ~$call_time_MS|";
|
|
}
|
|
echo "\n";
|
|
}
|
|
|
|
|
|
|
|
if ($format=='debug')
|
|
{
|
|
$ENDtime = date("U");
|
|
$RUNtime = ($ENDtime - $StarTtime);
|
|
echo "\n<!-- script runtime: $RUNtime seconds -->";
|
|
echo "\n</body>\n</html>\n";
|
|
}
|
|
|
|
if ($SSagent_debug_logging > 0) {vicidial_ajax_log($NOW_TIME,$startMS,$link,$ACTION,$php_script,$user,$stage,$lead_id,$session_name,$stmt);}
|
|
exit;
|
|
|
|
?>
|