From 1f077ebc2b9d20ba430d7e3d449832239ba19b37 Mon Sep 17 00:00:00 2001 From: FusionPBX Date: Fri, 28 Jun 2024 12:18:29 -0600 Subject: [PATCH] Bug FIX - Deny device_address 000000000000 Polycom will make a request with a device address of 000000000000 as well as another request with the real device mac address. The issue was 000000000000 was on another tenant and it delivered contacts from the other tenant. --- app/provision/resources/classes/provision.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/app/provision/resources/classes/provision.php b/app/provision/resources/classes/provision.php index 8bb7607445..c17ef6534b 100644 --- a/app/provision/resources/classes/provision.php +++ b/app/provision/resources/classes/provision.php @@ -140,6 +140,7 @@ //check in the devices table for a specific device address $sql = "select count(*) from v_devices "; $sql .= "where device_address = :device_address "; + $sql .= "and device_address <> '000000000000' "; $parameters['device_address'] = $device_address; $database = new database; $num_rows = $database->select($sql, $parameters, 'column'); @@ -334,6 +335,7 @@ //get the device_template $sql = "select * from v_devices "; $sql .= "where device_address = :device_address "; + $sql .= "and device_address <> '000000000000' "; if ($this->settings->get('provision','http_domain_filter', 'false') === "true") { $sql .= "and domain_uuid=:domain_uuid "; $parameters['domain_uuid'] = $domain_uuid; @@ -359,7 +361,8 @@ //register that we have seen the device $sql = "update v_devices "; $sql .= "set device_provisioned_date = :device_provisioned_date, device_provisioned_method = :device_provisioned_method, device_provisioned_ip = :device_provisioned_ip, device_provisioned_agent = :device_provisioned_agent "; - $sql .= "where domain_uuid = :domain_uuid and device_address = :device_address "; + $sql .= "where domain_uuid = :domain_uuid "; + $sql .= "and device_address = :device_address "; $parameters['domain_uuid'] = $domain_uuid; $parameters['device_address'] = strtolower($device_address); $parameters['device_provisioned_date'] = 'now()';