diff --git a/app/xml_cdr/v_xml_cdr_import.php b/app/xml_cdr/v_xml_cdr_import.php index e8a844d7ec..25f8097f98 100644 --- a/app/xml_cdr/v_xml_cdr_import.php +++ b/app/xml_cdr/v_xml_cdr_import.php @@ -564,7 +564,11 @@ //parse the xml to get the call detail record info try { - $conf_xml = simplexml_load_string($conf_xml_string); + //disable xml entities + libxml_disable_entity_loader(true); + + //load the string into an xml object + $conf_xml = simplexml_load_string($conf_xml_string, 'SimpleXMLElement', LIBXML_NOCDATA); } catch(Exception $e) { echo $e->getMessage();