dbxe/fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Increase the gateway domain_uuid security.

Browse Source
This commit is contained in:
Mark Crane
2015-01-22 11:32:16 +00:00
parent 438c015578
commit 393fcc3b02
1 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/gateways/gateway_edit.php
+11 -5
View File
@@ -79,14 +79,20 @@ else {
$description = check_str($_POST["description"]); $description = check_str($_POST["description"]);
} }
if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) { //prevent the domain_uuid from not being set by someone without this permission
if (!permission_exists('gateway_domain')) {
$msg = ''; $domain_uuid = $_SESSION['domain_uuid'];
if ($action == "update") {
$gateway_uuid = check_str($_POST["gateway_uuid"]);
} }
if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
//get the id
if ($action == "update") {
$gateway_uuid = check_str($_POST["gateway_uuid"]);
}
//check for all required data //check for all required data
$msg = '';
//if (strlen($domain_uuid) == 0) { $msg .= $text['message-required']." ".$text['label-domain_uuid']."<br>\n"; } //if (strlen($domain_uuid) == 0) { $msg .= $text['message-required']." ".$text['label-domain_uuid']."<br>\n"; }
if (strlen($gateway) == 0) { $msg .= $text['message-required']." ".$text['label-gateway']."<br>\n"; } if (strlen($gateway) == 0) { $msg .= $text['message-required']." ".$text['label-gateway']."<br>\n"; }
if ($register == "true") { if ($register == "true") {