dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix. Escape hostname string.

This commit is contained in:
Alexey Melnichuk 2015-08-25 16:49:56 +04:00
parent 65d1a77f7f
commit 55e3563191
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/sip_status/sip_status.php
View File

@ -108,7 +108,7 @@ if ($_GET['a'] == "download") {
$sql = "select sip_profile_name from v_sip_profiles "; $sql = "select sip_profile_name from v_sip_profiles ";
$sql .= "where sip_profile_enabled = 'true' "; $sql .= "where sip_profile_enabled = 'true' ";
if ($hostname) { if ($hostname) {
$sql .= "and (sip_profile_hostname = '" . $hostname . "' "; $sql .= "and (sip_profile_hostname = '" . check_str($hostname) . "' ";
$sql .= "or sip_profile_hostname = '' "; $sql .= "or sip_profile_hostname = '' ";
$sql .= "or sip_profile_hostname is null ) "; $sql .= "or sip_profile_hostname is null ) ";
} }