Fix the SQL command when using the advanced search and improve security on how showall is being used.

This commit is contained in:
markjcrane
2016-02-23 19:05:52 -07:00
parent 7d5382ed6d
commit 3b035a46c1
2 changed files with 6 additions and 6 deletions
+1 -1
View File
@@ -110,7 +110,7 @@ else {
echo " <input type='hidden' name='order' value='$order'>\n";
}
if (permission_exists('xml_cdr_all' && $_REQUEST['showall'] == 'true')) {
echo " <input type='hidden' name='showall' value='true'>\n";
echo " <input type='hidden' name='showall' value='true'>\n";
}
echo " <table cellpadding='0' cellspacing='0' border='0'>\n";
echo " <tr>\n";