dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add escape_quote quoted values

This commit is contained in:
FusionPBX 2024-02-05 17:10:20 -07:00 committed by GitHub
parent 951c36b70b
commit 1f5b979d0d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 14 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
app/fax_queue/resources/job/fax_send.php
View File

@ -103,6 +103,11 @@
return $exists; return $exists;
} }
//escape single quote with a back slash and single quote
function escape_quote($value) {
return str_replace("'", "\'", $value);
}
//check to see if the process exists //check to see if the process exists
$pid_exists = process_exists($pid_file); $pid_exists = process_exists($pid_file);
@ -246,15 +251,15 @@
//define the fax file //define the fax file
$common_variables = ''; $common_variables = '';
$common_variables = "accountcode='" . $fax_accountcode . "',"; $common_variables = "accountcode='" . escape_quote($fax_accountcode) . "',";
$common_variables .= "sip_h_accountcode='" . $fax_accountcode . "',"; $common_variables .= "sip_h_accountcode='" . escape_quote($fax_accountcode) . "',";
$common_variables .= "domain_uuid=" . $domain_uuid . ","; $common_variables .= "domain_uuid=" . $domain_uuid . ",";
$common_variables .= "domain_name=" . $domain_name . ","; $common_variables .= "domain_name=" . $domain_name . ",";
$common_variables .= "origination_caller_id_name='" . $fax_caller_id_name . "',"; $common_variables .= "origination_caller_id_name='" . escape_quote($fax_caller_id_name) . "',";
$common_variables .= "origination_caller_id_number='" . $fax_caller_id_number . "',"; $common_variables .= "origination_caller_id_number=" . $fax_caller_id_number . ",";
$common_variables .= "fax_ident='" . $fax_caller_id_number . "',"; $common_variables .= "fax_ident='" . escape_quote($fax_caller_id_number) . "',";
$common_variables .= "fax_header='" . $fax_caller_id_name . "',"; $common_variables .= "fax_header='" . escape_quote($fax_caller_id_name) . "',";
$common_variables .= "fax_file='" . $fax_file . "',"; $common_variables .= "fax_file='" . escape_quote($fax_file) . "',";
//extract fax_dtmf from the fax number //extract fax_dtmf from the fax number
fax_split_dtmf($fax_number, $fax_dtmf); fax_split_dtmf($fax_number, $fax_dtmf);