From 5bed9da5b3bc7db201375a41cfe1d7d1277b5258 Mon Sep 17 00:00:00 2001
From: FusionPBX <markjcrane@gmail.com>
Date: Sat, 7 Sep 2019 00:21:36 -0600
Subject: [PATCH] Update recording_play.php

---
 app/recordings/recording_play.php | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/app/recordings/recording_play.php b/app/recordings/recording_play.php
index 0117dbf265..81b2cf1157 100644
--- a/app/recordings/recording_play.php
+++ b/app/recordings/recording_play.php
@@ -38,7 +38,7 @@
 		exit;
 	}
 	
-	$filename = base64_decode($_GET['filename']);
+	$filename = $_GET['filename'];
 	$type = $_GET['type']; //moh //rec
 
 //show the content
@@ -65,16 +65,16 @@
 		if ($file_ext == "wav") {
 			//HTML5 method
 			if ($browser_name == "Google Chrome" || $browser_name == "Mozilla Firefox") {
-				echo "<audio src=\"recordings.php?a=download&type=".escape($type)."&filename=".base64_encode($filename)."\" autoplay=\"true\" ></audio>";
+				echo "<audio src=\"recordings.php?a=download&type=".urlencode($type)."&filename=".urlencode($filename)."\" autoplay=\"true\" ></audio>";
 			}
 			else {
-				echo "<audio src=\"http://localhost:8000/mod/recordings/recordings.php?a=download&type=".escape($type)."&filename=".base64_encode($filename)."\" autoplay=\"autoplay\"></audio>";
-				echo "<embed src=\"recordings.php?a=download&type=".escape($type)."&filename=".base64_encode($filename)."\" autostart=\"true\" width=\"300\" height=\"90\" name=\"sound_".$filename."\" enablejavascript=\"true\">\n";
+				echo "<audio src=\"http://localhost:8000/mod/recordings/recordings.php?a=download&type=".urlencode($type)."&filename=".urlencode($filename)."\" autoplay=\"autoplay\"></audio>";
+				echo "<embed src=\"recordings.php?a=download&type=".urlencode($type)."&filename=".urlencode($filename)."\" autostart=\"true\" width=\"300\" height=\"90\" name=\"sound_".$filename."\" enablejavascript=\"true\">\n";
 			}
 		}
 		if ($file_ext == "mp3") {
-			echo "<object type=\"application/x-shockwave-flash\" width=\"400\" height=\"17\" data=\"slim.swf?autoplay=true&song_title=".urlencode($filename)."&song_url=recordings.php?a=download&type=".escape($type)."&filename=".base64_encode($filename)."\">\n";
-			echo "<param name=\"movie\" value=\"slim.swf?autoplay=true&song_url=recordings.php?a=download&type=".escape($type)."&filename=".base64_encode($filename)."\" />\n";
+			echo "<object type=\"application/x-shockwave-flash\" width=\"400\" height=\"17\" data=\"slim.swf?autoplay=true&song_title=".urlencode($filename)."&song_url=recordings.php?a=download&type=".urlencode($type)."&filename=".urlencode($filename)."\">\n";
+			echo "<param name=\"movie\" value=\"slim.swf?autoplay=true&song_url=recordings.php?a=download&type=".urlencode($type)."&filename=".urlencode($filename)."\" />\n";
 			echo "<param name=\"quality\" value=\"high\"/>\n";
 			echo "<param name=\"bgcolor\" value=\"#E6E6E6\"/>\n";
 			echo "</object>\n";