Update exec.php

This commit is contained in:
FusionPBX 2019-06-13 08:33:05 -06:00 committed by GitHub
parent 3e693bc424
commit d19eb033d1
1 changed files with 14 additions and 32 deletions

View File

@ -26,17 +26,20 @@
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE. POSSIBILITY OF SUCH DAMAGE.
*/ */
include "root.php";
require_once "resources/require.php";
require_once "resources/check_auth.php";
if (permission_exists('operator_panel_view')) { //includes
//access granted include "root.php";
} require_once "resources/require.php";
else { require_once "resources/check_auth.php";
echo "access denied";
exit; //check permissions
} if (permission_exists('operator_panel_view')) {
//access granted
}
else {
echo "access denied";
exit;
}
//authorized referrer //authorized referrer
// if(stristr($_SERVER["HTTP_REFERER"], '/index.php') === false) { // if(stristr($_SERVER["HTTP_REFERER"], '/index.php') === false) {
@ -55,28 +58,7 @@ else {
$username = $_SESSION['username']; $username = $_SESSION['username'];
} }
//authorized commands if (count($_GET) >0) {
// if (stristr($switch_cmd, '&uuid=') == true) {
// //authorized;
// } elseif (stristr($switch_cmd, 'uuid_kill') == true) {
// //authorized;
// } elseif (stristr($switch_cmd, 'uuid_transfer') == true) {
// //authorized;
// } elseif (stristr($switch_cmd, 'uuid_record') == true) {
// //authorized;
// } elseif (stristr($action, 'user_status') == true) {
// //authorized;
// } elseif (stristr($action, 'callcenter_config') == true) {
// //authorized;
// } elseif (stristr($action, 'originate') == true) {
// //authorized;
// } else {
// //not found. this command is not authorized
// echo "access denied";
// exit;
// }
if (count($_GET)>0) {
//setup the event socket connection //setup the event socket connection
$fp = event_socket_create($_SESSION['event_socket_ip_address'], $_SESSION['event_socket_port'], $_SESSION['event_socket_password']); $fp = event_socket_create($_SESSION['event_socket_ip_address'], $_SESSION['event_socket_port'], $_SESSION['event_socket_password']);