From 8acf775ccd98a521781d2ef141dbd1261fc6cac1 Mon Sep 17 00:00:00 2001
From: FusionPBX <markjcrane@gmail.com>
Date: Wed, 14 Aug 2019 23:46:10 -0600
Subject: [PATCH] Update device_profile_edit.php

---
 app/devices/device_profile_edit.php | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/app/devices/device_profile_edit.php b/app/devices/device_profile_edit.php
index 063ed04790..fb33311897 100644
--- a/app/devices/device_profile_edit.php
+++ b/app/devices/device_profile_edit.php
@@ -265,6 +265,11 @@
 	$device_profile_settings[$x]['profile_setting_enabled'] = '';
 	$device_profile_settings[$x]['profile_setting_description'] = '';
 
+//filter the uuid
+	if (!is_uuid($device_profile_uuid)) {
+		$device_profile_uuid = null;
+	}
+
 //show the header
 	require_once "resources/header.php";
 
@@ -276,7 +281,7 @@
 	echo "<td align='left' width='30%' nowrap='nowrap' valign='top'><b>".$text['title-device_profile']."</b><br><br></td>\n";
 	echo "<td width='70%' align='right' valign='top'>\n";
 	echo "	<input type='button' class='btn' name='' alt='".$text['button-back']."' onclick=\"window.location='device_profiles.php'\" value='".$text['button-back']."'>";
-	echo "	<input type='button' class='btn' name='' alt='".$text['button-copy']."' onclick=\"window.location='device_profile_copy.php'\" value='".$text['button-copy']."'>";
+	echo "	<input type='button' class='btn' name='' alt='".$text['button-copy']."' onclick=\"window.location='device_profile_copy.php?id=".urlencode($device_profile_uuid)."'\" value='".$text['button-copy']."'>";
 	echo "	<input type='submit' class='btn' value='".$text['button-save']."'>";
 	echo "</td>\n";
 	echo "</tr>\n";