Update conference_center_edit.php (#3148)

This commit is contained in:
AlexanderDCrane 2018-06-13 00:52:27 -06:00 committed by FusionPBX
parent 7c8e4c35dc
commit ec33309df5
1 changed files with 4 additions and 4 deletions

View File

@ -324,7 +324,7 @@
if ($conference_center_greeting == $recording_path."/".$recording_filename) {
$selected = "selected='selected'";
}
echo " <option value='".$recording_path."/".$recording_filename."' ".$selected.">".$recording_name."</option>\n";
echo " <option value='".escape($recording_path)."/".escape($recording_filename)."' ".escape($selected).">".escape($recording_name)."</option>\n";
unset($selected);
}
echo "</optgroup>\n";
@ -334,7 +334,7 @@
echo "<optgroup label='".$text['label-phrases']."'>\n";
foreach ($phrases as &$row) {
$selected = ($conference_center_greeting == "phrase:".$row["phrase_uuid"]) ? true : false;
echo " <option value='phrase:".$row["phrase_uuid"]."' ".(($selected) ? "selected='selected'" : null).">".$row["phrase_name"]."</option>\n";
echo " <option value='phrase:".escape($row["phrase_uuid"])."' ".(($selected) ? "selected='selected'" : null).">".escape($row["phrase_name"])."</option>\n";
if ($selected) { $tmp_selected = true; }
}
unset ($prep_statement);
@ -351,7 +351,7 @@
$conference_center_greeting = substr($conference_center_greeting, 71);
}
$selected = ($conference_center_greeting == $value) ? true : false;
echo " <option value='".$value."' ".(($selected) ? "selected='selected'" : null).">".$value."</option>\n";
echo " <option value='".escape($value)."' ".(($selected) ? "selected='selected'" : null).">".escape($value)."</option>\n";
if ($selected) { $tmp_selected = true; }
}
}
@ -363,7 +363,7 @@
if (!$tmp_selected) {
echo "<optgroup label='selected'>\n";
if (file_exists($_SESSION['switch']['recordings']['dir']."/".$_SESSION['domain_name']."/".$conference_center_greeting)) {
echo " <option value='".$_SESSION['switch']['recordings']['dir']."/".$_SESSION['domain_name']."/".$conference_center_greeting."' selected='selected'>".$ivr_menu_greet_long."</option>\n";
echo " <option value='".$_SESSION['switch']['recordings']['dir']."/".$_SESSION['domain_name']."/".escape($conference_center_greeting)."' selected='selected'>".escape($ivr_menu_greet_long)."</option>\n";
}
else if (substr($conference_center_greeting, -3) == "wav" || substr($conference_center_greeting, -3) == "mp3") {
echo " <option value='".escape($conference_center_greeting)."' selected='selected'>".escape($conference_center_greeting)."</option>\n";