Changeset 10723 for modules/branches/2.9/core

Timestamp:

12/23/10 14:10:55 (2 years ago)

Author:

GameGamer43

Message:

closes #4710 - strips <> prior to adding the Inbound DID and CID Number to the database to prevent further issues

Files:

• modules/branches/2.9/core/functions.inc.php (modified) (1 diff)

modules/branches/2.9/core/functions.inc.php

@@ -3534 +3534 @@
-
-  if (empty($existing)) {
+    //Strip <> just to be on the safe side otherwise this is not deleteable from the GUI
+          $invalidDIDChars = array('<','>');
+          $extension = str_replace($invalidDIDChars,"",$extension);
+          $cidnum = str_replace($invalidDIDChars,"",$cidnum); 
+
-    $destination= ($target) ? $target : ${$goto0.'0'};
-    $sql="INSERT INTO incoming (cidnum,extension,destination,privacyman,pmmaxretries,pmminlength,alertinfo, ringing, mohclass, description, grppre, delay_answer, pricid) values ('$cidnum','$extension','$destination','$privacyman','$pmmaxretries','$pmminlength','$alertinfo', '$ringing', '$mohclass', '$description', '$grppre', '$delay_answer', '$pricid')";