dbxe/fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #4215 from AlexanderDCrane/patch-464

Browse Source 
Update bridges.php
This commit is contained in:
FusionPBX
2019-05-27 20:24:39 -06:00
committed by GitHub
parent 1c6ffe09dd 73360b246d
commit 6379cd22dc
1 changed files with 12 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/bridges/bridges.php
+12 -14
View File
@@ -68,16 +68,20 @@
//get order and order by and sanatize the values //get order and order by and sanatize the values
$order_by = $_GET["order_by"]; $order_by = $_GET["order_by"];
$order = $_GET["order"]; $order = $_GET["order"];
//validate order by
if (strlen($order_by) > 0) { if (strlen($order_by) > 0) {
$order_by = preg_replace('#[^a-zA-Z0-9_\-]#', '', $order_by); $order_by = preg_replace('#[^a-zA-Z0-9_\-]#', '', $order_by);
} }
if (strlen($order) > 0) {
if ($order == 'asc' || $order == 'desc') { //validate the order
//expected value switch ($order) {
} case 'asc':
else { break;
case 'desc':
break;
default:
$order = ''; $order = '';
}
} }
//add the parameters //add the parameters
@@ -112,13 +116,7 @@
$sql .= "order by $order_by $order "; $sql .= "order by $order_by $order ";
} }
$database = new database; $database = new database;
$row = $database->execute($sql, $parameters); $num_rows = $database->select($sql, $parameters, 'column');
if ($row[0]['num_rows'] > 0) {
$num_rows = $row[0]['num_rows'];
}
else {
$num_rows = '0';
}
//prepare to page the results //prepare to page the results
$rows_per_page = ($_SESSION['domain']['paging']['numeric'] != '') ? $_SESSION['domain']['paging']['numeric'] : 50; $rows_per_page = ($_SESSION['domain']['paging']['numeric'] != '') ? $_SESSION['domain']['paging']['numeric'] : 50;
@@ -151,7 +149,7 @@
$sql .= "limit $rows_per_page offset $offset "; $sql .= "limit $rows_per_page offset $offset ";
} }
$database = new database; $database = new database;
$bridges = $database->execute($sql, $parameters); $bridges = $database->select($sql, $parameters, 'all');
//$message = $database->message; //$message = $database->message;
//print_r($message); //print_r($message);